Vulnerability-Lookup

FKIE_CVE-2026-0405

Vulnerability from fkie_nvd - Published: 2026-01-13 16:16 - Updated: 2026-02-12 17:40

Severity ?

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

References

URL	Tags
a2826606-91e7-4eb6-899e-8484bd4575d5	https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory	Patch, Vendor Advisory
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/cbr750	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/nbr750	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe370	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe371	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe372	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe373	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe374	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe770	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe771	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe772	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe773	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe970	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbe971	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbr750	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbr840	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbr850	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbr860	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbre950	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbre960	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbs750	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbs840	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbs850	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbs860	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbse950	Patch, Product
a2826606-91e7-4eb6-899e-8484bd4575d5	https://www.netgear.com/support/product/rbse960	Patch, Product

Impacted products

Vendor	Product	Version
netgear	cbr750_firmware	*
netgear	cbr750	-
netgear	nbr750_firmware	*
netgear	nbr750	-
netgear	rbe370_firmware	*
netgear	rbe370	-
netgear	rbe371_firmware	*
netgear	rbe371	-
netgear	rbe372_firmware	*
netgear	rbe372	-
netgear	rbe373_firmware	*
netgear	rbe373	-
netgear	rbe374_firmware	*
netgear	rbe374	-
netgear	rbe770_firmware	*
netgear	rbe770	-
netgear	rbe771_firmware	*
netgear	rbe771	-
netgear	rbe772_firmware	*
netgear	rbe772	-
netgear	rbe773_firmware	*
netgear	rbe773	-
netgear	rbe970_firmware	*
netgear	rbe970	-
netgear	rbe971_firmware	*
netgear	rbe971	-
netgear	rbr750_firmware	*
netgear	rbr750	-
netgear	rbr840_firmware	*
netgear	rbr840	-
netgear	rbr850_firmware	*
netgear	rbr850	-
netgear	rbr860_firmware	*
netgear	rbr860	-
netgear	rbs750_firmware	*
netgear	rbs750	-
netgear	rbs840_firmware	*
netgear	rbs840	-
netgear	rbs850_firmware	*
netgear	rbs850	-
netgear	rbs860_firmware	*
netgear	rbs860	-
netgear	rbre950_firmware	*
netgear	rbre950	-
netgear	rbre960_firmware	*
netgear	rbre960	-
netgear	rbse950_firmware	*
netgear	rbse950	-
netgear	rbse960_firmware	*
netgear	rbse960	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B0A2EEFF-5049-4FEA-BDE2-05F7EC1716CD",
              "versionEndExcluding": "4.6.14.8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CBD14EFC-C6EF-485B-A594-73B8525704A5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B72BE7F2-BA8C-49BF-AB3C-5E5EA7272524",
              "versionEndExcluding": "4.6.15.14",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:nbr750:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5666EA3D-AF24-42A0-8EE9-4BB580A6957A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2A13940B-149A-4B1D-A55D-279D2D44A65E",
              "versionEndExcluding": "12.1.3.11",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe370:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "368F8D25-16A4-416B-82EC-7508218DD281",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4F7F974-8561-4B94-A2CE-8E2639FB2521",
              "versionEndExcluding": "12.1.3.11",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe371:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00BA4811-2DD1-4DA6-8ECF-CFFEFCB443F2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F7B120D-3A47-42F5-9E88-F221CE92ACA2",
              "versionEndExcluding": "12.1.3.11",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe372:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FA875C8-A4CC-4CC6-8681-803C6F244E36",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "00C5F601-231C-46B6-AF01-3BFBFC5EB39D",
              "versionEndExcluding": "12.1.3.11",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe373:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3E88B09B-E822-420E-9F9C-3DF666497D51",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A985F25-0BED-431D-B5F2-B9C35AB40A76",
              "versionEndExcluding": "12.1.3.11",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe374:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4B041C8-A297-478F-86A0-91769750F7B9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6895D66-FA20-4102-AF46-AF014AAFD774",
              "versionEndExcluding": "10.5.20.7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe770:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "203F8C90-2850-4506-BADF-F420AFCEC4F7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "790CB1B0-4180-4E66-A3D3-042465DF0013",
              "versionEndExcluding": "10.5.20.7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe771:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E09B4CF6-3EC0-486B-A7EB-5F3CAF972806",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7EA0EED6-331B-4927-B4BB-25AE4C428644",
              "versionEndExcluding": "10.5.20.7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe772:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F4E800D-E5F9-4FF5-A910-A684B5ABA804",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3DA1F136-2807-4A3F-B40A-810509EFDDF8",
              "versionEndExcluding": "10.5.20.7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe773:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "43F2349E-98C7-4BEB-8F4A-3B4502D98B07",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3821162-B566-4B42-B210-B7F2B0E39512",
              "versionEndExcluding": "9.13.2.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE1F3088-9598-4EB5-A8A0-E0D4E529CB12",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6196E396-B709-40A8-827F-A64204E0BC4A",
              "versionEndExcluding": "9.13.2.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3080999-19F9-4651-80F3-A6461C27E489",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "493D48B4-0613-4AE0-A943-2BA487ED5BC5",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C13F5C69-FA9B-472A-9036-0C2967BDCDE9",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF602E0D-3D64-4176-8588-D333BA010254",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4489CB05-A1C0-408C-8D8C-56EE98CA20E8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "40BEF73B-C160-4721-817F-D19451BED93B",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D92E4C8E-222A-476C-8273-F7171FC61F0B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "48E5CF81-241E-43DF-90EE-5C53C7116CE0",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "928FC2C1-4D05-495B-ACD8-1D013EB18EE6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5ED2821-64CA-40D7-B96F-2407AC6209BE",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B529194C-C440-4BC3-850F-0613FC548F86",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "92B6DE04-A9F5-451F-9E2F-9DFBA39C10B9",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "84AEA27B-8BEA-4E83-819A-FDAC1881928F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D2594C9-743F-4623-A54F-48950FCFE89D",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "221CA950-E984-44CD-9E1B-3AADE3CEBE52",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "11AB7E3A-991B-4CDC-9CD9-89B319ACF618",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6630553-D726-4524-8BD2-3EE839DE6676",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "945C2CFB-DA2C-4035-9B8A-B9FAF2159163",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "848E7D41-EB61-4AB3-9AED-8E35281DB464",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2167962B-04BC-4BC7-9BD1-661CE3204E48",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "314FF95E-5A0C-4A6B-B8D6-28546F2C1A12",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D0191A8-64CE-41D2-9586-4C4C3A0B7333",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "32A3F32B-B05E-42C6-969A-0F4DD5B7942E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A79A571-A5DA-4953-9AA9-84840720967E",
              "versionEndExcluding": "7.2.8.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "419AF785-61C6-4911-A170-6A06D7991948",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authentication bypass vulnerability in NETGEAR Orbi devices allows \nusers connected to the local network to access the router web interface \nas an admin."
    }
  ],
  "id": "CVE-2026-0405",
  "lastModified": "2026-02-12T17:40:40.530",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NO",
          "Recovery": "USER",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "ADJACENT",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "UNREPORTED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "AMBER",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "DIFFUSE",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "MODERATE"
        },
        "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "type": "Secondary"
      }
    ]
  },
  "published": "2026-01-13T16:16:10.513",
  "references": [
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/cbr750"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/nbr750"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe370"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe371"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe372"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe373"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe374"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe770"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe771"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe772"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe773"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe970"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbe971"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbr750"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbr840"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbr850"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbr860"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbre950"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbre960"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbs750"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbs840"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbs850"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbs860"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbse950"
    },
    {
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "tags": [
        "Patch",
        "Product"
      ],
      "url": "https://www.netgear.com/support/product/rbse960"
    }
  ],
  "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ],
      "source": "a2826606-91e7-4eb6-899e-8484bd4575d5",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2026-0405 (GCVE-0-2026-0405)

Vulnerability from cvelistv5 – Published: 2026-01-13 16:00 – Updated: 2026-01-14 04:57

Title

Authentication Bypass in NETGEAR Orbi Devices

Summary

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

Severity ?

6.1 (Medium)


                        
                          CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

CWE

CWE-287 - Improper Authentication

Assigner

NETGEAR

References

URL

Tags

	https://www.netgear.com/support/product/rbe971	patchproduct
	https://www.netgear.com/support/product/rbe970	patchproduct
	https://www.netgear.com/support/product/cbr750	patchproduct
	https://www.netgear.com/support/product/nbr750	patchproduct
	https://www.netgear.com/support/product/rbe770	patchproduct
	https://www.netgear.com/support/product/rbe771	patchproduct
	https://www.netgear.com/support/product/rbe772	patchproduct
	https://www.netgear.com/support/product/rbe773	patchproduct
	https://www.netgear.com/support/product/rbr750	patchproduct
	https://www.netgear.com/support/product/rbs750	patchproduct
	https://www.netgear.com/support/product/rbr840	patchproduct
	https://www.netgear.com/support/product/rbs840	patchproduct
	https://www.netgear.com/support/product/rbr850	patchproduct
	https://www.netgear.com/support/product/rbs850	patchproduct
	https://www.netgear.com/support/product/rbr860	patchproduct
	https://www.netgear.com/support/product/rbs860	patchproduct
	https://www.netgear.com/support/product/rbre950	patchproduct
	https://www.netgear.com/support/product/rbse950	patchproduct
	https://www.netgear.com/support/product/rbre960	patchproduct
	https://www.netgear.com/support/product/rbse960	patchproduct
	https://www.netgear.com/support/product/rbe370	patchproduct
	https://www.netgear.com/support/product/rbe371	patchproduct
	https://www.netgear.com/support/product/rbe372	patchproduct
	https://www.netgear.com/support/product/rbe373	patchproduct
	https://www.netgear.com/support/product/rbe374	patchproduct
	https://kb.netgear.com/000070442/January-2026-NET…	vendor-advisory

Impacted products

Vendor

Product

Version

NETGEAR

RBE970

Affected: 0 , < v9.13.2.1 (custom)

NETGEAR	RBE971	Affected: 0 , < v9.13.2.1 (custom)
NETGEAR	CBR750	Affected: 0 , < V4.6.14.8 (custom)
NETGEAR	NBR750	Affected: 0 , < V4.6.15.14 (custom)
NETGEAR	RBE770	Affected: 0 , < v10.5.20.7 (custom)
NETGEAR	RBE771	Affected: 0 , < v10.5.20.7 (custom)
NETGEAR	RBE772	Affected: 0 , < v10.5.20.7 (custom)
NETGEAR	RBE773	Affected: 0 , < v10.5.20.7 (custom)
NETGEAR	RBR750	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBS750	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBR840	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBS840	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBR850	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBS850	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBR860	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBS860	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBRE950	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBSE950	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBRE960	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBSE960	Affected: 0 , < v7.2.8.2 (custom)
NETGEAR	RBE370	Affected: 0 , < v12.1.3.11 (custom)
NETGEAR	RBE371	Affected: 0 , < v12.1.3.11 (custom)
NETGEAR	RBE372	Affected: 0 , < v12.1.3.11 (custom)
NETGEAR	RBE373	Affected: 0 , < v12.1.3.11 (custom)
NETGEAR	RBE374	Affected: 0 , < v12.1.3.11 (custom)

Credits

Fulaige

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-0405",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-13T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-14T04:57:25.799Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "RBE970",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v9.13.2.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE971",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v9.13.2.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CBR750",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "V4.6.14.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "NBR750",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "V4.6.15.14",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE770",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v10.5.20.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE771",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v10.5.20.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE772",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v10.5.20.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE773",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v10.5.20.7",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBR750",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBS750",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBR840",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBS840",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBR850",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBS850",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBR860",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBS860",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBRE950",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBSE950",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBRE960",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBSE960",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v7.2.8.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE370",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v12.1.3.11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE371",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v12.1.3.11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE372",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v12.1.3.11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE373",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v12.1.3.11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RBE374",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "v12.1.3.11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe970:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v9.13.2.1",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe971:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v9.13.2.1",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:cbr750:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v4.6.14.8",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:nbr750:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v4.6.15.14",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe770:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v10.5.20.7",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe771:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v10.5.20.7",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe772:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v10.5.20.7",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe773:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v10.5.20.7",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbr840:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbs840:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbr860:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbs860:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbre950:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbse950:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v7.2.8.2",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe370:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v12.1.3.11",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe371:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v12.1.3.11",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe372:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v12.1.3.11",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe373:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v12.1.3.11",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:h:netgear:rbe374:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "v12.1.3.11",
                  "versionStartIncluding": "0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Fulaige"
        }
      ],
      "datePublic": "2026-01-13T16:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eAn authentication bypass vulnerability in NETGEAR Orbi devices allows \nusers connected to the local network to access the router web interface \nas an admin.\u003c/div\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "An authentication bypass vulnerability in NETGEAR Orbi devices allows \nusers connected to the local network to access the router web interface \nas an admin."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-115",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-115 Authentication Bypass"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NO",
            "Recovery": "USER",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "ADJACENT",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "LOW",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "DIFFUSE",
            "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "MODERATE"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-287",
              "description": "CWE-287 Improper Authentication",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-13T16:21:13.069Z",
        "orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "shortName": "NETGEAR"
      },
      "references": [
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe971"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe970"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/cbr750"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/nbr750"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe770"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe771"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe772"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe773"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbr750"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbs750"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbr840"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbs840"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbr850"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbs850"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbr860"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbs860"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbre950"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbse950"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbre960"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbse960"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe370"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe371"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe372"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe373"
        },
        {
          "tags": [
            "patch",
            "product"
          ],
          "url": "https://www.netgear.com/support/product/rbe374"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eDevices with automatic updates enabled may already have this patch \napplied. If not, please check the firmware version and update it to the \nlatest.\u003c/p\u003e\u003cp\u003eFixed in:\u003c/p\u003e\u003cp\u003e\u003cspan\u003eCBR750 f\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/cbr750\"\u003eirmware V4.6.14.8 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eNBR750 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/nbr750\"\u003efirmware V4.6.15.14 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE370 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbe370\"\u003efirmware v12.1.3.11 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE371 \u003c/span\u003e\u003ca href=\"https://www.netgear.com/support/product/rbe371\"\u003efirmware v12.1.3.11 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE372 \u003c/span\u003e\u003ca href=\"https://www.netgear.com/support/product/rbe372\"\u003efirmware v12.1.3.11 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE373 \u003c/span\u003e\u003ca href=\"https://www.netgear.com/support/product/rbe373\"\u003efirmware v12.1.3.11 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE374 \u003c/span\u003e\u003ca href=\"https://www.netgear.com/support/product/rbe374\"\u003efirmware v12.1.3.11 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE770 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbe770\"\u003efirmware v10.5.20.7 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE771 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbe771\"\u003efirmware v10.5.20.7 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE772 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbe772\"\u003efirmware v10.5.20.7 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE773 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbe773\"\u003efirmware v10.5.20.7 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE970\u0026nbsp;\u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbe970\"\u003efirmware v9.13.2.1 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBE971 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbe971\"\u003efirmware v9.13.2.1 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBR750 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbr750\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBR840 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbr840\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBR850 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbr850\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBR860 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbr860\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBS750 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbs750\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBS840 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbs840\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBS850 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbs850\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBS860 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbs860\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBRE950 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbre950\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBRE960 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbre960\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBSE950 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbse950\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003cbr\u003e\u003cspan\u003eRBSE960 \u003c/span\u003e\u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://www.netgear.com/support/product/rbse960\"\u003efirmware v7.2.8.2 or later\u003c/a\u003e\u003c/p\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e"
            }
          ],
          "value": "Devices with automatic updates enabled may already have this patch \napplied. If not, please check the firmware version and update it to the \nlatest.\n\nFixed in:\n\nCBR750 f irmware V4.6.14.8 or later https://www.netgear.com/support/product/cbr750 \nNBR750  firmware V4.6.15.14 or later https://www.netgear.com/support/product/nbr750 \nRBE370  firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe370 \nRBE371  firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe371 \nRBE372  firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe372 \nRBE373  firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe373 \nRBE374  firmware v12.1.3.11 or later https://www.netgear.com/support/product/rbe374 \nRBE770  firmware v10.5.20.7 or later https://www.netgear.com/support/product/rbe770 \nRBE771  firmware v10.5.20.7 or later https://www.netgear.com/support/product/rbe771 \nRBE772  firmware v10.5.20.7 or later https://www.netgear.com/support/product/rbe772 \nRBE773  firmware v10.5.20.7 or later https://www.netgear.com/support/product/rbe773 \nRBE970\u00a0 firmware v9.13.2.1 or later https://www.netgear.com/support/product/rbe970 \nRBE971  firmware v9.13.2.1 or later https://www.netgear.com/support/product/rbe971 \nRBR750  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbr750 \nRBR840  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbr840 \nRBR850  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbr850 \nRBR860  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbr860 \nRBS750  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbs750 \nRBS840  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbs840 \nRBS850  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbs850 \nRBS860  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbs860 \nRBRE950  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbre950 \nRBRE960  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbre960 \nRBSE950  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbse950 \nRBSE960  firmware v7.2.8.2 or later https://www.netgear.com/support/product/rbse960"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Authentication Bypass in NETGEAR Orbi Devices",
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5",
    "assignerShortName": "NETGEAR",
    "cveId": "CVE-2026-0405",
    "datePublished": "2026-01-13T16:00:48.296Z",
    "dateReserved": "2025-12-03T04:16:11.511Z",
    "dateUpdated": "2026-01-14T04:57:25.799Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

FKIE_CVE-2026-0405

CVE-2026-0405 (GCVE-0-2026-0405)

Tags

Sightings

Nomenclature