CVE-2026-0403
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
- Score
- CVSS 3.1 8.0 High
- Status
- Analyzed - a2826606-91e7-4eb6-899e-8484bd4575d5
- Published
- 2026-01-13
- Last modified
- 2026-02-26
- Weaknesses
- CWE-20
Affected products
- Rbe970 (Netgear)
- Rbe970 Firmware (Netgear)
- Rbe971 (Netgear)
- Rbe971 Firmware (Netgear)
- Rbr750 (Netgear)
- Rbr750 Firmware (Netgear)
- Rbr850 (Netgear)
- Rbr850 Firmware (Netgear)
- Rbr860 (Netgear)
- Rbr860 Firmware (Netgear)
- Rbre960 (Netgear)
- Rbre960 Firmware (Netgear)
- Rbs750 (Netgear)
- Rbs750 Firmware (Netgear)
- Rbs850 (Netgear)
- Rbs850 Firmware (Netgear)
- Rbs860 (Netgear)
- Rbs860 Firmware (Netgear)
- Rbse960 (Netgear)
- Rbse960 Firmware (Netgear)
References
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/rbe970
- https://www.netgear.com/support/product/rbe971
- https://www.netgear.com/support/product/rbr750
- https://www.netgear.com/support/product/rbr850
- https://www.netgear.com/support/product/rbr860
- https://www.netgear.com/support/product/rbre960
- https://www.netgear.com/support/product/rbs750
- https://www.netgear.com/support/product/rbs850
- https://www.netgear.com/support/product/rbs860
- https://www.netgear.com/support/product/rbse960
