PT-2026-2626 · NetGear · Netgear Orbi Routers

Fxc233 · Published 2026-01-13 · Updated 2026-02-20 · CVE-2026-0403

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NETGEAR Orbi routers (affected versions not specified)

Description An insufficient input validation issue exists in NETGEAR Orbi routers. This allows attackers connected to the router’s LAN to execute OS command injections. The issue involves a lack of proper validation of user-supplied input, potentially enabling malicious code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-00540

CVE-2026-0403

Affected Products

Netgear Orbi Routers

References · 16

• https://netgear.com/support/product/rbre960 · Patch
• https://netgear.com/support/product/rbe971 · Patch
• https://netgear.com/support/product/rbr850 · Patch
• https://bdu.fstec.ru/vul/2026-00540 · Security Note
• https://netgear.com/support/product/rbs860 · Patch
• https://netgear.com/support/product/rbs750 · Patch
• https://osv.dev/vulnerability/CVE-2026-0403 · Vendor Advisory
• https://netgear.com/support/product/rbse960 · Patch
• https://netgear.com/support/product/rbe970 · Patch
• https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory · Vendor Advisory
• https://netgear.com/support/product/rbr750 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-0403 · Security Note
• https://netgear.com/support/product/rbs850 · Patch
• https://netgear.com/support/product/rbr860 · Patch
• https://t.me/cveNotify/152643 · Telegram Post