PT-2026-2626 · NetGear · Netgear Orbi Routers

Fxc233 · Publicado 2026-01-13 · Atualizado 2026-02-20 · CVE-2026-0403

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR Orbi routers (affected versions not specified)

Description An insufficient input validation issue exists in NETGEAR Orbi routers. This allows attackers connected to the router’s LAN to execute OS command injections. The issue involves a lack of proper validation of user-supplied input, potentially enabling malicious code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2026-00540

CVE-2026-0403

Produtos afetados

Netgear Orbi Routers

Referências · 16

• https://netgear.com/support/product/rbre960 · Correção
• https://netgear.com/support/product/rbe971 · Correção
• https://netgear.com/support/product/rbr850 · Correção
• https://bdu.fstec.ru/vul/2026-00540 · Nota de Segurança
• https://netgear.com/support/product/rbs860 · Correção
• https://netgear.com/support/product/rbs750 · Correção
• https://osv.dev/vulnerability/CVE-2026-0403 · Aviso do Fabricante
• https://t.me/cveNotify/152643 · Publicação no Telegram
• https://netgear.com/support/product/rbse960 · Correção
• https://netgear.com/support/product/rbe970 · Correção
• https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory · Aviso do Fabricante
• https://netgear.com/support/product/rbr750 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-0403 · Nota de Segurança
• https://netgear.com/support/product/rbs850 · Correção
• https://netgear.com/support/product/rbr860 · Correção