CVE-2026-0403lowCWE-20

Insufficient input validation in NETGEAR Orbi routers

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 1.1epss 0.3%

exploitation probability

0.3%top 75% of all CVEs

observed exploitation

nono source reports it

An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

Affected products

NETGEAR · RBE970 NETGEAR · RBE971 NETGEAR · RBR750 NETGEAR · RBR850 NETGEAR · RBR860 NETGEAR · RBRE960 NETGEAR · RBS750 NETGEAR · RBS850 NETGEAR · RBS860 NETGEAR · RBSE960

References