MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2026-0411

CVSS 4.2v4.0pub. 2026-06-09upd. 2026-06-18

An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.

CVSS Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

  • Netgear Rbe970

    HW
    Netgear
    all versions

  • Netgear Rbe970 Firmware

    OS
    Netgear
    < 9.13.2.1

  • Netgear Rbr350

    HW
    Netgear
    all versions

  • Netgear Rbr350 Firmware

    OS
    Netgear
    < 4.4.2.2

  • Netgear Rbr760

    HW
    Netgear
    all versions

  • Netgear Rbr760 Firmware

    OS
    Netgear
    < 6.3.8.11

  • Netgear Rbs350

    HW
    Netgear
    all versions

  • Netgear Rbs350 Firmware

    OS
    Netgear
    < 4.4.2.2

  • Netgear Rbs760

    HW
    Netgear
    all versions

  • Netgear Rbs760 Firmware

    OS
    Netgear
    < 6.3.8.11
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-45652CRITICAL9.6PL ✓same product

Ujawnienie wrażliwych informacji w urządzeniach NETGEAR RBK352/RBR350/RBS350

CVE-2021-45520CRITICAL9.6PL ✓same product

NETGEAR RBK352/RBR350/RBS350 — zakodowane hasło (hardcoded password)

CVE-2021-45619CRITICAL9.6PL ✓same product

NETGEAR — command injection bez uwierzytelnienia w routerach i extenderach

CVE-2023-41183HIGH8.8same product

NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent atta...

CVE-2021-45521HIGH7.4same product

Certain NETGEAR devices are affected by a hardcoded password. This affects RBK352 before 4.4.0.10, RBR350 befo...