An authentication bypass vulnerability in NETGEAR Orbi devices allows
users connected to the local network to access the router web interface
as an admin.

Project Subscriptions

Vendors Products
Netgear Subscribe
Cbr750 Firmware Subscribe
Nbr750 Firmware Subscribe
Rbe370 Firmware Subscribe
Rbe371 Firmware Subscribe
Rbe372 Firmware Subscribe
Rbe373 Firmware Subscribe
Rbe374 Firmware Subscribe
Rbe770 Firmware Subscribe
Rbe771 Firmware Subscribe
Rbe772 Firmware Subscribe
Rbe773 Firmware Subscribe
Rbe970 Firmware Subscribe
Rbe971 Firmware Subscribe
Rbr750 Firmware Subscribe
Rbr840 Firmware Subscribe
Rbr850 Firmware Subscribe
Rbr860 Firmware Subscribe
Rbre950 Subscribe
Rbre950 Firmware Subscribe
Rbre960 Subscribe
Rbre960 Firmware Subscribe
Rbs750 Firmware Subscribe
Rbs840 Firmware Subscribe
Rbs850 Firmware Subscribe
Rbs860 Firmware Subscribe
Rbse950 Subscribe
Rbse950 Firmware Subscribe
Rbse960 Subscribe
Rbse960 Firmware Subscribe
Advisories

No advisories yet.

Fixes

Solution

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: CBR750 f irmware V4.6.14.8 or later https://www.netgear.com/support/product/cbr750 NBR750 firmware V4.6.15.14 or later https://www.netgear.com/support/product/nbr750 RBE370 firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe370 RBE371 firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe371 RBE372 firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe372 RBE373 firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe373 RBE374 firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe374 RBE770 firmware v10.5.20.7 or later https://www.netgear.com/support/product/rbe770 RBE771 firmware v10.5.20.7 or later https://www.netgear.com/support/product/rbe771 RBE772 firmware v10.5.20.7 or later https://www.netgear.com/support/product/rbe772 RBE773 firmware v10.5.20.7 or later https://www.netgear.com/support/product/rbe773 RBE970  firmware v9.13.2.1 or later https://www.netgear.com/support/product/rbe970 RBE971 firmware v9.13.2.1 or later https://www.netgear.com/support/product/rbe971 RBR750 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbr750 RBR840 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbr840 RBR850 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbr850 RBR860 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbr860 RBS750 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbs750 RBS840 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbs840 RBS850 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbs850 RBS860 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbs860 RBRE950 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbre950 RBRE960 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbre960 RBSE950 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbse950 RBSE960 firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbse960


Workaround

No workaround given by the vendor.

History

Thu, 12 Feb 2026 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Netgear cbr750 Firmware
Netgear nbr750 Firmware
Netgear rbe370 Firmware
Netgear rbe371 Firmware
Netgear rbe372 Firmware
Netgear rbe373 Firmware
Netgear rbe374 Firmware
Netgear rbe770 Firmware
Netgear rbe771 Firmware
Netgear rbe772 Firmware
Netgear rbe773 Firmware
Netgear rbe970 Firmware
Netgear rbe971 Firmware
Netgear rbr750 Firmware
Netgear rbr840 Firmware
Netgear rbr850 Firmware
Netgear rbr860 Firmware
Netgear rbre950 Firmware
Netgear rbre960 Firmware
Netgear rbs750 Firmware
Netgear rbs840 Firmware
Netgear rbs850 Firmware
Netgear rbs860 Firmware
Netgear rbse950 Firmware
Netgear rbse960 Firmware
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:nbr750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe370:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe371:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe372:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe373:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe374:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe770:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe771:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe772:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe773:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*
Vendors & Products Netgear cbr750 Firmware
Netgear nbr750 Firmware
Netgear rbe370 Firmware
Netgear rbe371 Firmware
Netgear rbe372 Firmware
Netgear rbe373 Firmware
Netgear rbe374 Firmware
Netgear rbe770 Firmware
Netgear rbe771 Firmware
Netgear rbe772 Firmware
Netgear rbe773 Firmware
Netgear rbe970 Firmware
Netgear rbe971 Firmware
Netgear rbr750 Firmware
Netgear rbr840 Firmware
Netgear rbr850 Firmware
Netgear rbr860 Firmware
Netgear rbre950 Firmware
Netgear rbre960 Firmware
Netgear rbs750 Firmware
Netgear rbs840 Firmware
Netgear rbs850 Firmware
Netgear rbs860 Firmware
Netgear rbse950 Firmware
Netgear rbse960 Firmware
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Tue, 13 Jan 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 13 Jan 2026 16:30:00 +0000


Tue, 13 Jan 2026 16:15:00 +0000

Type Values Removed Values Added
Description An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
Title Authentication Bypass in NETGEAR Orbi Devices
First Time appeared Netgear
Netgear cbr750
Netgear nbr750
Netgear rbe370
Netgear rbe371
Netgear rbe372
Netgear rbe373
Netgear rbe374
Netgear rbe770
Netgear rbe771
Netgear rbe772
Netgear rbe773
Netgear rbe970
Netgear rbe971
Netgear rbr750
Netgear rbr840
Netgear rbr850
Netgear rbr860
Netgear rbre950
Netgear rbre960
Netgear rbs750
Netgear rbs840
Netgear rbs850
Netgear rbs860
Netgear rbse950
Netgear rbse960
Weaknesses CWE-287
CPEs cpe:2.3:h:netgear:cbr750:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:nbr750:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe370:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe371:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe372:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe373:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe374:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe770:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe771:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe772:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe773:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe970:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe971:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr840:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr860:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre950:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs840:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs860:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse950:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*
Vendors & Products Netgear
Netgear cbr750
Netgear nbr750
Netgear rbe370
Netgear rbe371
Netgear rbe372
Netgear rbe373
Netgear rbe374
Netgear rbe770
Netgear rbe771
Netgear rbe772
Netgear rbe773
Netgear rbe970
Netgear rbe971
Netgear rbr750
Netgear rbr840
Netgear rbr850
Netgear rbr860
Netgear rbre950
Netgear rbre960
Netgear rbs750
Netgear rbs840
Netgear rbs850
Netgear rbs860
Netgear rbse950
Netgear rbse960
References
Metrics cvssV4_0

{'score': 6.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published:

Updated: 2026-01-14T04:57:25.799Z

Reserved: 2025-12-03T04:16:11.511Z

Link: CVE-2026-0405

cve-icon Vulnrichment

Updated: 2026-01-13T18:50:53.486Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-13T16:16:10.513

Modified: 2026-02-12T17:40:40.530

Link: CVE-2026-0405

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses