CVE-2026-0403
EUVD-2026-223213.01.2026, 16:16
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| netgear | rbe971_firmware | 𝑥 < 9.10.0.2 |
| netgear | rbe970_firmware | 𝑥 < 9.10.0.2 |
| netgear | rbr750_firmware | 𝑥 < 7.2.8.5 |
| netgear | rbr850_firmware | 𝑥 < 7.2.8.5 |
| netgear | rbr860_firmware | 𝑥 < 7.2.8.5 |
| netgear | rbs750_firmware | 𝑥 < 7.2.8.5 |
| netgear | rbs850_firmware | 𝑥 < 7.2.8.5 |
| netgear | rbs860_firmware | 𝑥 < 7.2.8.5 |
| netgear | rbre960_firmware | 𝑥 < 7.2.8.5 |
| netgear | rbse960_firmware | 𝑥 < 7.2.8.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References