CVE-2026-0411mediumCWE-200

CVE-2026-0411: fallo de gravedad media en NETGEAR RBE970

A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear RBE970+ Monitorear RBR350

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.2epss 0.3%
An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:U
Productos afectados
NETGEAR · RBE970NETGEAR · RBR350NETGEAR · RBR760NETGEAR · RBS350NETGEAR · RBS760
CVEs relacionadas — NETGEAR RBE970

En el mismo producto, de las más peligrosas a las menos.

CVE-2026-11814MEDIUMCommand injection vulnerability in certain NETGEAR Nighthawk and Orbi routersEPSS 2.2%CVE-2026-0405MEDIUMAuthentication Bypass in NETGEAR Orbi DevicesEPSS 0.4%CVE-2026-3088MEDIUMUnauthenticated users can disrupt router operationEPSS 0.4%CVE-2026-0403LOWInsufficient input validation in NETGEAR Orbi routersEPSS 0.3%CVE-2026-62655MEDIUMA DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi modelsEPSS 0.3%CVE-2026-9212MEDIUMInsufficient authentication and input validation in certain NETGEAR productsEPSS 0.3%