PT-2026-2627 · NetGear · Netgear Orbi

Hyunseok Yun · Publicado 2026-01-13 · Atualizado 2026-01-13 · CVE-2026-0404

Positive Technologies (AI Summary)

CVSS v2.0

8.3

Alta

Vetor base

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR Orbi devices (affected versions not specified)

Description A flaw exists in the DHCPv6 functionality of NETGEAR Orbi devices due to insufficient input validation. This allows attackers located on the same network, authenticated via WiFi or LAN, to execute OS command injections on the router. DHCPv6 is not enabled by default.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2026-00541

CVE-2026-0404

Produtos afetados

Netgear Orbi

Referências · 17

• https://netgear.com/support/product/rbr860 · Correção
• https://netgear.com/support/product/rbs860 · Correção
• https://netgear.com/support/product/rbs850 · Correção
• https://netgear.com/support/product/rbs750 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2026-0404 · Nota de Segurança
• https://netgear.com/support/product/rbr750 · Correção
• https://netgear.com/support/product/rbre960 · Correção
• https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory · Aviso do Fabricante
• https://netgear.com/support/product/rbse950 · Correção
• https://netgear.com/support/product/rbse960 · Correção
• https://osv.dev/vulnerability/CVE-2026-0404 · Aviso do Fabricante
• https://netgear.com/support/product/rbr850 · Correção
• https://bdu.fstec.ru/vul/2026-00541 · Nota de Segurança
• https://netgear.com/support/product/rbr840 · Correção
• https://netgear.com/support/product/rbre950 · Correção