high8.0
CVE-2026-0403
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
Impact
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netgear | Rbe971 Firmware | before 9.10.0.2 |
| Netgear | Rbe970 Firmware | before 9.10.0.2 |
| Netgear | Rbr750 Firmware | before 7.2.8.5 |
| Netgear | Rbr850 Firmware | before 7.2.8.5 |
| Netgear | Rbr860 Firmware | before 7.2.8.5 |
| Netgear | Rbs750 Firmware | before 7.2.8.5 |
| Netgear | Rbs850 Firmware | before 7.2.8.5 |
| Netgear | Rbs860 Firmware | before 7.2.8.5 |
| Netgear | Rbre960 Firmware | before 7.2.8.5 |
| Netgear | Rbse960 Firmware | before 7.2.8.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/rbe970
- https://www.netgear.com/support/product/rbe971
- https://www.netgear.com/support/product/rbr750
- https://www.netgear.com/support/product/rbr850
- https://www.netgear.com/support/product/rbr860
- https://www.netgear.com/support/product/rbre960
- https://www.netgear.com/support/product/rbs750
- https://www.netgear.com/support/product/rbs850
- https://www.netgear.com/support/product/rbs860
- https://www.netgear.com/support/product/rbse960