CVE-2026-0411: A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites
An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability.
Orbi WiFi Systems without satellite devices are not impacted by this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
RBE970 Orbi Quad-band Mesh WiFi 7 Add-on Satelliteto a version that resolves this vulnerability.Fixed in 6.3.8.11 - Upgrade
Upgrade
RBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Routerto a version that resolves this vulnerability.Fixed in V4.4.2.2 - Upgrade
Upgrade
RBR760 Orbi Tri-Band Mesh WiFi 6 Routerto a version that resolves this vulnerability.Fixed in V6.3.8.11 - Upgrade
Upgrade
RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satelliteto a version that resolves this vulnerability.Fixed in V4.4.2.2 - Upgrade
Upgrade
RBS760 Orbi Tri-Band Mesh WiFi 6 Add-on Satelliteto a version that resolves this vulnerability.Fixed in V6.3.8.11 - Operational
Install the latest firmware for affected Orbi satellite devices as soon as possible (per NETGEAR recommendation).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0411?
CVE-2026-0411 has a medium severity rating of 4.2 according to the CVSS score.
How do I fix CVE-2026-0411?
To fix CVE-2026-0411, it is recommended to install the latest firmware for your NETGEAR Orbi satellite device.
What type of vulnerability is CVE-2026-0411?
CVE-2026-0411 is categorized as an information disclosure vulnerability.
Who is affected by CVE-2026-0411?
CVE-2026-0411 affects users of specific NETGEAR Orbi satellites, including the RBR, RBE, and RBS Series.
What can happen if CVE-2026-0411 is exploited?
If exploited, CVE-2026-0411 could allow a user connected to your network to gain unauthorized administrator access to your Orbi router.