CVE-2026-0411mediumCWE-200

CVE-2026-0411: falha de média gravidade em NETGEAR RBE970

A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar RBE970+ Monitorar RBR350

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.2epss 0.3%
An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:U
Produtos afetados
NETGEAR · RBE970NETGEAR · RBR350NETGEAR · RBR760NETGEAR · RBS350NETGEAR · RBS760
CVEs relacionadas — NETGEAR RBE970

No mesmo produto, das mais perigosas para as menos.

CVE-2026-11814MEDIUMCommand injection vulnerability in certain NETGEAR Nighthawk and Orbi routersEPSS 2.2%CVE-2026-0405MEDIUMAuthentication Bypass in NETGEAR Orbi DevicesEPSS 0.4%CVE-2026-3088MEDIUMUnauthenticated users can disrupt router operationEPSS 0.4%CVE-2026-0403LOWInsufficient input validation in NETGEAR Orbi routersEPSS 0.3%CVE-2026-62655MEDIUMA DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi modelsEPSS 0.3%CVE-2026-9212MEDIUMInsufficient authentication and input validation in certain NETGEAR productsEPSS 0.3%