CVE-2026-3088

EUVD-2026-35456
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 28%
Affected Products (NVD)
VendorProductVersion
netgearrbe970_firmware
𝑥
< 9.10.1.4
netgearrbe971_firmware
𝑥
< 9.10.1.4
netgearrbr860_firmware
𝑥
< 7.2.7.15
netgearrbre950_firmware
𝑥
< 7.2.7.15
netgearrbre960_firmware
𝑥
< 7.2.7.15
netgearrbs860_firmware
𝑥
< 7.2.7.15
netgearrbse950_firmware
𝑥
< 7.2.7.15
netgearrbse960_firmware
𝑥
< 7.2.7.15
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
https://www.netgear.com/support/product/rbr860/
https://www.netgear.com/support/product/rbre950/
https://www.netgear.com/support/product/rbre960/
https://www.netgear.com/support/product/rbs860/
https://www.netgear.com/support/product/rbse950/
https://www.netgear.com/support/product/rbse960/