Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-0405

Authentication Bypass in NETGEAR Orbi Devices

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in v9.13.2.1, V4.6.14.8, V4.6.15.14, v10.5.20.7, v7.2.8.2, and 1 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • NETGEAR RBE970

    fixed in v9.13.2.1

  • NETGEAR RBE971

    fixed in v9.13.2.1

  • NETGEAR CBR750

    fixed in V4.6.14.8

  • NETGEAR NBR750

    fixed in V4.6.15.14

  • NETGEAR RBE770

    fixed in v10.5.20.7

  • NETGEAR RBE771

    fixed in v10.5.20.7

  • NETGEAR RBE772

    fixed in v10.5.20.7

  • NETGEAR RBE773

    fixed in v10.5.20.7

  • NETGEAR RBR750

    fixed in v7.2.8.2

  • NETGEAR RBS750

    fixed in v7.2.8.2

  • NETGEAR RBR840

    fixed in v7.2.8.2

  • NETGEAR RBS840

    fixed in v7.2.8.2

  • NETGEAR RBR850

    fixed in v7.2.8.2

  • NETGEAR RBS850

    fixed in v7.2.8.2

  • NETGEAR RBR860

    fixed in v7.2.8.2

  • NETGEAR RBS860

    fixed in v7.2.8.2

  • NETGEAR RBRE950

    fixed in v7.2.8.2

  • NETGEAR RBSE950

    fixed in v7.2.8.2

  • NETGEAR RBRE960

    fixed in v7.2.8.2

  • NETGEAR RBSE960

    fixed in v7.2.8.2

  • NETGEAR RBE370

    fixed in v12.1.3.11

  • NETGEAR RBE371

    fixed in v12.1.3.11

  • NETGEAR RBE372

    fixed in v12.1.3.11

  • NETGEAR RBE373

    fixed in v12.1.3.11

  • NETGEAR RBE374

    fixed in v12.1.3.11

References 25

netgear.com