Skip to main content
← All vulnerabilities
CVE-2026-0413

Buffer overflow vulnerability in certain NETGEAR Nighthawk routers

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in V12.1.2.1, V10.5.20.10, V7.2.8.5
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • NETGEAR RBE370

    fixed in V12.1.2.1

  • NETGEAR RBE770

    fixed in V10.5.20.10

  • NETGEAR RBR750

    fixed in V7.2.8.5

  • NETGEAR RBR840

    fixed in V7.2.8.5

  • NETGEAR RBR850

    fixed in V7.2.8.5

  • NETGEAR RBR860

    fixed in V7.2.8.5

  • NETGEAR RBRE950

    fixed in V7.2.8.5

  • NETGEAR RBRE960

    fixed in V7.2.8.5

  • NETGEAR RBS750

    fixed in V7.2.8.5

  • NETGEAR RBS840

    fixed in V7.2.8.5

  • NETGEAR RBS850

    fixed in V7.2.8.5

  • NETGEAR RBS860

    fixed in V7.2.8.5

  • NETGEAR RBSE950

    fixed in V7.2.8.5

  • NETGEAR RBSE960

    fixed in V7.2.8.5

References 15

netgear.com

kb.netgear.com