CVE-2026-0413

EUVD-2026-35462
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.5 MEDIUM
ADJACENT_NETWORK
LOW
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Affected Products (NVD)
VendorProductVersion
netgearrbe370_firmware
𝑥
< 12.1.2.1
netgearrbe770_firmware
𝑥
< 10.5.20.10
netgearrbr750_firmware
𝑥
< 7.2.8.5
netgearrbr840_firmware
𝑥
< 7.2.8.5
netgearrbr850_firmware
𝑥
< 7.2.8.5
netgearrbr860_firmware
𝑥
< 7.2.8.5
netgearrbre950_firmware
𝑥
< 7.2.8.5
netgearrbre960_firmware
𝑥
< 7.2.8.5
netgearrbs750_firmware
𝑥
< 7.2.8.5
netgearrbs840_firmware
𝑥
< 7.2.8.5
netgearrbs850_firmware
𝑥
< 7.2.8.5
netgearrbs860_firmware
𝑥
< 7.2.8.5
netgearrbse950_firmware
𝑥
< 7.2.8.5
netgearrbse960_firmware
𝑥
< 7.2.8.5
𝑥
= Vulnerable software versions