PT-2026-2628 · NetGear · Netgear Orbi

Fulaige · Published 2026-01-13 · Updated 2026-01-29 · CVE-2026-0405

Positive Technologies (AI Summary)

CVSS v2.0

8.3

High

Base vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NETGEAR Orbi (affected versions not specified)

Description A flaw exists that allows users on the local network to gain administrative access to the router web interface without proper authentication. This bypass enables unauthorized access to administrative functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2026-00542

CVE-2026-0405

Affected Products

Netgear Orbi

References · 32

• https://netgear.com/support/product/rbe971 · Patch
• https://netgear.com/support/product/rbe373 · Patch
• https://bdu.fstec.ru/vul/2026-00542 · Security Note
• https://netgear.com/support/product/rbe773 · Patch
• https://netgear.com/support/product/rbe371 · Patch
• https://netgear.com/support/product/rbre950 · Patch
• https://netgear.com/support/product/rbs860 · Patch
• https://netgear.com/support/product/rbe374 · Patch
• https://netgear.com/support/product/rbe372 · Patch
• https://netgear.com/support/product/rbe370 · Patch
• https://netgear.com/support/product/rbr750 · Patch
• https://netgear.com/support/product/rbe970 · Patch
• https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0405 · Security Note
• https://osv.dev/vulnerability/CVE-2026-0405 · Vendor Advisory