CVE-2026-0411

EUVD-2026-35465
An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability.


Orbi WiFi Systems without satellite devices are not impacted by this issue.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8 HIGH
ADJACENT_NETWORK
LOW
LOW
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 19%
Affected Products (NVD)
VendorProductVersion
netgearrbe970_firmware
𝑥
< 9.13.2.1
netgearrbr350_firmware
𝑥
< 4.4.2.2
netgearrbr760_firmware
𝑥
< 6.3.8.11
netgearrbs350_firmware
𝑥
< 4.4.2.2
netgearrbs760_firmware
𝑥
< 6.3.8.11
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
https://www.netgear.com/support/product/rbe970/
https://www.netgear.com/support/product/rbr350/
https://www.netgear.com/support/product/rbr760/
https://www.netgear.com/support/product/rbs350/
https://www.netgear.com/support/product/rbs760/