NetSight
IP …
high7.8

CVE-2026-0405

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

Impact

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

Affected products

VendorProductAffected versions
NetgearCbr750 Firmware
before 4.6.14.8
NetgearNbr750 Firmware
before 4.6.15.14
NetgearRbe370 Firmware
before 12.1.3.11
NetgearRbe371 Firmware
before 12.1.3.11
NetgearRbe372 Firmware
before 12.1.3.11
NetgearRbe373 Firmware
before 12.1.3.11
NetgearRbe374 Firmware
before 12.1.3.11
NetgearRbe770 Firmware
before 10.5.20.7
NetgearRbe771 Firmware
before 10.5.20.7
NetgearRbe772 Firmware
before 10.5.20.7
NetgearRbe773 Firmware
before 10.5.20.7
NetgearRbe970 Firmware
before 9.13.2.1

Weakness classification

CWE-287

References