VulnerabilityAnalyzed
CVE-2026-0405
An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
MEDIUM 6.1EPSS 0.37%
Does this matter?
Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.
Description
An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
- CVSS 4.0
- 6.1 MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.37% probability · 30th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- netgear/cbr750 firmware · netgear/nbr750 firmware · netgear/rbe370 firmware · netgear/rbe371 firmware · netgear/rbe372 firmware · netgear/rbe373 firmware · netgear/rbe374 firmware · netgear/rbe770 firmware · netgear/rbe771 firmware · netgear/rbe772 firmware · netgear/rbe773 firmware · netgear/rbe970 firmware · netgear/rbe971 firmware · netgear/rbr750 firmware · netgear/rbr840 firmware · netgear/rbr850 firmware · netgear/rbr860 firmware · netgear/rbs750 firmware · netgear/rbs840 firmware · netgear/rbs850 firmware · +5 more
- Source
- a2826606-91e7-4eb6-899e-8484bd4575d5
References
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-AdvisoryPatch, Vendor Advisory
- https://www.netgear.com/support/product/cbr750Patch, Product
- https://www.netgear.com/support/product/nbr750Patch, Product
- https://www.netgear.com/support/product/rbe370Patch, Product
- https://www.netgear.com/support/product/rbe371Patch, Product
- https://www.netgear.com/support/product/rbe372Patch, Product
- https://www.netgear.com/support/product/rbe373Patch, Product
- https://www.netgear.com/support/product/rbe374Patch, Product
- https://www.netgear.com/support/product/rbe770Patch, Product
- https://www.netgear.com/support/product/rbe771Patch, Product
- https://www.netgear.com/support/product/rbe772Patch, Product
- https://www.netgear.com/support/product/rbe773Patch, Product
- https://www.netgear.com/support/product/rbe970Patch, Product
- https://www.netgear.com/support/product/rbe971Patch, Product
- https://www.netgear.com/support/product/rbr750Patch, Product
- https://www.netgear.com/support/product/rbr840Patch, Product
- https://www.netgear.com/support/product/rbr850Patch, Product
- https://www.netgear.com/support/product/rbr860Patch, Product
- https://www.netgear.com/support/product/rbre950Patch, Product
- https://www.netgear.com/support/product/rbre960Patch, Product
- https://www.netgear.com/support/product/rbs750Patch, Product
- https://www.netgear.com/support/product/rbs840Patch, Product
- https://www.netgear.com/support/product/rbs850Patch, Product
- https://www.netgear.com/support/product/rbs860Patch, Product
- https://www.netgear.com/support/product/rbse950Patch, Product
- https://www.netgear.com/support/product/rbse960Patch, Product
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.