CVE-2026-0403 - Vulnerability Details

An insufficient input validation vulnerability in NETGEAR Orbi routers
allows attackers connected to the router's LAN to execute OS command
injections.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00098.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

NETGEAR

RBR750

unaffected

Version	Status	Constraints
`0`	affected	≤ 4.6.14.3

NETGEAR

RBS750

unaffected

Version	Status	Constraints
`0`	affected	≤ 4.6.14.3

NETGEAR

RBRE960

unaffected

Version	Status	Constraints
`0`	affected	< v7.2.7.15

NETGEAR

RBSE960

unaffected

Version	Status	Constraints
`0`	affected	< v7.2.7.15

NETGEAR

RBR850

unaffected

Version	Status	Constraints
`0`	affected	< V7.2.8.5

NETGEAR

RBS850

unaffected

Version	Status	Constraints
`0`	affected	< V7.2.8.5

NETGEAR

RBE971

unaffected

Version	Status	Constraints
`0`	affected	< v9.10.0.2

NETGEAR

RBE970

unaffected

Version	Status	Constraints
`0`	affected	< v9.10.0.2

NETGEAR

RBR860

unaffected

Version	Status	Constraints
`0`	affected	< v7.2.8.5

NETGEAR

RBS860

unaffected

Version	Status	Constraints
`0`	affected	< v7.2.8.5

Configuration 1 [-]

AND

cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*

Configuration 6 [-]

AND

cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*

Configuration 7 [-]

AND

cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*

Configuration 8 [-]

AND

cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*

Configuration 9 [-]

AND

cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*

Configuration 10 [-]

AND

cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*

No data.

Project Subscriptions

Vendors	Products
Netgear Subscribe	Rbe970 Subscribe Rbe970 Firmware Subscribe Rbe971 Subscribe Rbe971 Firmware Subscribe Rbr750 Subscribe Rbr750 Firmware Subscribe Rbr850 Subscribe Rbr850 Firmware Subscribe Rbr860 Subscribe Rbr860 Firmware Subscribe Rbre960 Subscribe Rbre960 Firmware Subscribe Rbs750 Subscribe Rbs750 Firmware Subscribe Rbs850 Subscribe Rbs850 Firmware Subscribe Rbs860 Subscribe Rbs860 Firmware Subscribe Rbse960 Subscribe Rbse960 Firmware Subscribe

Advisories

No advisories yet.

Fixes

Solution

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: RBE971 firmware 9.10.0.2 or later https://www.netgear.com/support/product/rbe971 RBE970 firmware 9.10.0.2 or later https://www.netgear.com/support/product/rbe970 RBR750 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr750 RBR850 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr850 RBR860 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr860 RBS750 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs750 RBS850 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs850 RBS860 firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs860 RBRE960 firmware 7.2.7.15 or later https://www.netgear.com/support/product/rbre960 RBSE960 firmware 7.2.7.15 or later https://www.netgear.com/support/product/rbse960

Workaround

No workaround given by the vendor.

References

Link	Providers
https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
https://www.netgear.com/support/product/rbe970
https://www.netgear.com/support/product/rbe971
https://www.netgear.com/support/product/rbr750
https://www.netgear.com/support/product/rbr850
https://www.netgear.com/support/product/rbr860
https://www.netgear.com/support/product/rbre960
https://www.netgear.com/support/product/rbs750
https://www.netgear.com/support/product/rbs850
https://www.netgear.com/support/product/rbs860
https://www.netgear.com/support/product/rbse960

History

Fri, 20 Feb 2026 19:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Netgear rbe970 Firmware Netgear rbe971 Firmware Netgear rbr750 Firmware Netgear rbr850 Firmware Netgear rbr860 Firmware Netgear rbre960 Firmware Netgear rbs750 Firmware Netgear rbs850 Firmware Netgear rbs860 Firmware Netgear rbse960 Firmware
CPEs		cpe:2.3:h:netgear:rbe970:-:::::::* cpe:2.3:h:netgear:rbe971:-:::::::* cpe:2.3:h:netgear:rbr750:-:::::::* cpe:2.3:h:netgear:rbr850:-:::::::* cpe:2.3:h:netgear:rbr860:-:::::::* cpe:2.3:h:netgear:rbre960:-:::::::* cpe:2.3:h:netgear:rbs750:-:::::::* cpe:2.3:h:netgear:rbs850:-:::::::* cpe:2.3:h:netgear:rbs860:-:::::::* cpe:2.3:h:netgear:rbse960:-:::::::* cpe:2.3:o:netgear:rbe970_firmware:::::::: cpe:2.3:o:netgear:rbe971_firmware:::::::: cpe:2.3:o:netgear:rbr750_firmware:::::::: cpe:2.3:o:netgear:rbr850_firmware:::::::: cpe:2.3:o:netgear:rbr860_firmware:::::::: cpe:2.3:o:netgear:rbre960_firmware:::::::: cpe:2.3:o:netgear:rbs750_firmware:::::::: cpe:2.3:o:netgear:rbs850_firmware:::::::: cpe:2.3:o:netgear:rbs860_firmware:::::::: cpe:2.3:o:netgear:rbse960_firmware::::::::
Vendors & Products		Netgear rbe970 Firmware Netgear rbe971 Firmware Netgear rbr750 Firmware Netgear rbr850 Firmware Netgear rbr860 Firmware Netgear rbre960 Firmware Netgear rbs750 Firmware Netgear rbs850 Firmware Netgear rbs860 Firmware Netgear rbse960 Firmware
Metrics		cvssV3_1 `{'score': 8.0, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Tue, 13 Jan 2026 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 13 Jan 2026 16:30:00 +0000

Type	Values Removed	Values Added
References		https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory

Tue, 13 Jan 2026 16:15:00 +0000

Type	Values Removed	Values Added
Description		An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
Title		Insufficient input validation in NETGEAR Orbi routers
First Time appeared		Netgear Netgear rbe970 Netgear rbe971 Netgear rbr750 Netgear rbr850 Netgear rbr860 Netgear rbre960 Netgear rbs750 Netgear rbs850 Netgear rbs860 Netgear rbse960
Weaknesses		CWE-20
CPEs		cpe:2.3:h:netgear:rbe970:::::::: cpe:2.3:h:netgear:rbe971:::::::: cpe:2.3:h:netgear:rbr750:::::::: cpe:2.3:h:netgear:rbr850:::::::: cpe:2.3:h:netgear:rbr860:::::::: cpe:2.3:h:netgear:rbre960:::::::: cpe:2.3:h:netgear:rbs750:::::::: cpe:2.3:h:netgear:rbs850:::::::: cpe:2.3:h:netgear:rbs860:::::::: cpe:2.3:h:netgear:rbse960::::::::
Vendors & Products		Netgear Netgear rbe970 Netgear rbe971 Netgear rbr750 Netgear rbr850 Netgear rbr860 Netgear rbre960 Netgear rbs750 Netgear rbs850 Netgear rbs860 Netgear rbse960
References		https://www.netgear.com/support/product/rbe970 https://www.netgear.com/support/product/rbe971 https://www.netgear.com/support/product/rbr750 https://www.netgear.com/support/product/rbr850 https://www.netgear.com/support/product/rbr860 https://www.netgear.com/support/product/rbre960 https://www.netgear.com/support/product/rbs750 https://www.netgear.com/support/product/rbs850 https://www.netgear.com/support/product/rbs860 https://www.netgear.com/support/product/rbse960
Metrics		cvssV4_0 `{'score': 1.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber'}`

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published: 2026-01-13T16:00:25.831Z

Updated: 2026-01-14T04:57:19.762Z

Reserved: 2025-12-03T04:16:02.333Z

Link: CVE-2026-0403

Vulnrichment

Updated: 2026-01-13T19:08:24.923Z

NVD

Status : Analyzed

Published: 2026-01-13T16:16:10.150

Modified: 2026-02-20T19:38:39.640

Link: CVE-2026-0403

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

CWE-20

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required High

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Project Subscriptions

Projects

JSON object

JSON object

JSON object

JSON object

JSON object