CVE-2026-0413: Buffer overflow vulnerability in certain NETGEAR Nighthawk routers

Published Jun 9, 2026
·
Updated

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected Software

29 affected components
Netgear NETGEAR Nighthawk
All of the following
Netgear Rbe370 Firmware<12.1.2.1
Netgear Rbe370
All of the following
Netgear Rbe770 Firmware<10.5.20.10
Netgear Rbe770
All of the following
Netgear RBR750 firmware<7.2.8.5
Netgear RBR750
All of the following
Netgear Rbr840 Firmware<7.2.8.5
Netgear RBR840
All of the following
Netgear Rbr850 Firmware<7.2.8.5
Netgear RBR850
All of the following
Netgear Rbr860 Firmware<7.2.8.5
Netgear Rbr860
All of the following
Netgear Rbre950 Firmware<7.2.8.5
Netgear Rbre950
All of the following
Netgear Rbre960 Firmware<7.2.8.5
Netgear RBRE960
All of the following
Netgear Rbs750 Firmware<7.2.8.5
Netgear RBS750
All of the following
Netgear Rbs840 Firmware<7.2.8.5
Netgear RBS840
All of the following
Netgear Rbs850 Firmware<7.2.8.5
Netgear RBS850
All of the following
Netgear Rbs860 Firmware<7.2.8.5
Netgear Rbs860
All of the following
Netgear Rbse950 Firmware<7.2.8.5
Netgear Rbse950
All of the following
Netgear Rbse960 Firmware<7.2.8.5
Netgear RBSE960

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade RBE370 Orbi Dual-band Mesh WiFi 7 Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V12.1.2.1
  2. Upgrade

    Upgrade RBE770 Orbi Tri-band Mesh WiFi 7 Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V10.5.20.10
  3. Upgrade

    Upgrade RBR750 Orbi WiFi 6 Router AX4200 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  4. Upgrade

    Upgrade RBR840 Orbi WiFi 6 System AX5700 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  5. Upgrade

    Upgrade RBR850 Orbi WiFi 6 Router AX6000 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  6. Upgrade

    Upgrade RBR860 Orbi Tri-band Mesh WiFi 6 Router – 860 Series to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  7. Upgrade

    Upgrade RBRE950 Orbi Quad-band Mesh WiFi 6E Router to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  8. Upgrade

    Upgrade RBRE960 Orbi Quad-band Mesh WiFi 6E Router to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  9. Upgrade

    Upgrade RBS750 Orbi WiFi 6 Add-on Satellite AX4200 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  10. Upgrade

    Upgrade RBS840 Orbi WiFi 6 Add-on Satellite AX5700 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  11. Upgrade

    Upgrade RBS850 Orbi WiFi 6 Satellite AX6000 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  12. Upgrade

    Upgrade RBS860 Orbi Tri-band Mesh WiFi 6 Add-on Satellite – 860 Series to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  13. Upgrade

    Upgrade RBSE950 Orbi Quad-band Mesh WiFi 6E Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  14. Upgrade

    Upgrade RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  15. Remove

    Remove RBR840 Orbi WiFi 6 System AX5700 from your environment.

    Device is marked End-of-Support (EoS). Retire this device and replace it with a newer NETGEAR device for continued security support.

  16. Remove

    Remove RBS840 Orbi WiFi 6 Add-on Satellite AX5700 from your environment.

    Device is marked End-of-Support (EoS). Retire this device and replace it with a newer NETGEAR device for continued security support.

  17. Operational

    Check each device's firmware version and update it to the listed fixed version (or the latest available) if the fix is not already applied. Note: devices with automatic updates enabled may already have this patch applied; ensure automatic updates are enabled where appropriate.

Event History

Jun 9, 2026
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-0413?

The severity of CVE-2026-0413 is medium with a CVSS score of 4.3.

2

How do I fix CVE-2026-0413?

To fix CVE-2026-0413, check your NETGEAR Nighthawk router for the latest firmware update and apply it if not automatically updated.

3

What type of vulnerability is CVE-2026-0413?

CVE-2026-0413 is a buffer overflow vulnerability caused by insufficient input validation.

4

Who is affected by CVE-2026-0413?

Authenticated administrators connected to the local network of certain NETGEAR Nighthawk routers are affected by CVE-2026-0413.

5

What can attackers do with CVE-2026-0413?

Attackers exploiting CVE-2026-0413 can make unauthorized modifications to router software and functionality.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203