CVE-2026-0415: Insufficient input validation vulnerability in certain Orbi routers

Published Jun 9, 2026
·
Updated

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected Software

27 affected components
Netgear Orbi
All of the following
Netgear Rbe970 Firmware<9.12.4.9
Netgear Rbe970
All of the following
Netgear RBR750 firmware<7.2.8.5
Netgear RBR750
All of the following
Netgear Rbr840 Firmware<7.2.8.5
Netgear RBR840
All of the following
Netgear Rbr850 Firmware<7.2.8.5
Netgear RBR850
All of the following
Netgear Rbr860 Firmware<7.2.8.5
Netgear Rbr860
All of the following
Netgear Rbre950 Firmware<7.2.8.5
Netgear Rbre950
All of the following
Netgear Rbre960 Firmware<7.2.8.5
Netgear RBRE960
All of the following
Netgear Rbs750 Firmware<7.2.8.5
Netgear RBS750
All of the following
Netgear Rbs840 Firmware<7.2.8.5
Netgear RBS840
All of the following
Netgear Rbs850 Firmware<7.2.8.5
Netgear RBS850
All of the following
Netgear Rbs860 Firmware<7.2.8.5
Netgear Rbs860
All of the following
Netgear Rbse950 Firmware<7.2.8.5
Netgear Rbse950
All of the following
Netgear Rbse960 Firmware<7.2.8.5
Netgear RBSE960

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade NETGEAR RBE970 Orbi Quad-band Mesh WiFi 7 Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V9.12.4.9
  2. Upgrade

    Upgrade NETGEAR RBR750 Orbi WiFi 6 Router AX4200 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  3. Upgrade

    Upgrade NETGEAR RBR840 (EoS) Orbi WiFi 6 System AX5700 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  4. Upgrade

    Upgrade NETGEAR RBR850 Orbi WiFi 6 Router AX6000 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  5. Upgrade

    Upgrade NETGEAR RBR860 Orbi Tri-band Mesh WiFi 6 Router – 860 Series to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  6. Upgrade

    Upgrade NETGEAR RBRE950 Orbi Quad-band Mesh WiFi 6E Router to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  7. Upgrade

    Upgrade NETGEAR RBRE960 Orbi Quad-band Mesh WiFi 6E Router to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  8. Upgrade

    Upgrade NETGEAR RBS750 Orbi WiFi 6 Add-on Satellite AX4200 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  9. Upgrade

    Upgrade NETGEAR RBS840 (EoS) Orbi WiFi 6 Add-on Satellite AX5700 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  10. Upgrade

    Upgrade NETGEAR RBS850 Orbi WiFi 6 Satellite AX6000 to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  11. Upgrade

    Upgrade NETGEAR RBS860 Orbi Tri-band Mesh WiFi 6 Add-on Satellite – 860 Series to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  12. Upgrade

    Upgrade NETGEAR RBSE950 Orbi Quad-band Mesh WiFi 6E Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  13. Upgrade

    Upgrade NETGEAR RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V7.2.8.5
  14. Remove

    Remove NETGEAR RBR840 (EoS) Orbi WiFi 6 System AX5700 from your environment.

    Models marked (EoS) have reached End-of-Support and no security updates are planned. Retire this device and replace with a newer NETGEAR device for continued security support.

  15. Remove

    Remove NETGEAR RBS840 (EoS) Orbi WiFi 6 Add-on Satellite AX5700 from your environment.

    Models marked (EoS) have reached End-of-Support and no security updates are planned. Retire this device and replace with a newer NETGEAR device for continued security support.

  16. Configuration

    Enable automatic firmware updates on affected devices so they can receive available patches automatically.

    Orbi firmware automatic updates automatic_updates = enabled
  17. Operational

    Check the firmware version on each affected device and update it to the latest firmware. Devices with automatic updates enabled may already have this patch applied.

Event History

Jun 9, 2026
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:16 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-0415?

The severity of CVE-2026-0415 is rated as medium with a CVSS score of 4.3.

2

How do I fix CVE-2026-0415?

To fix CVE-2026-0415, ensure that your NETGEAR Orbi device has the latest firmware version installed.

3

What type of vulnerability is CVE-2026-0415?

CVE-2026-0415 is classified as an insufficient input validation vulnerability affecting certain NETGEAR Orbi routers.

4

Who is affected by CVE-2026-0415?

Authenticated administrators connected to the local network of affected NETGEAR Orbi routers are at risk from CVE-2026-0415.

5

What can attackers do with CVE-2026-0415?

Attackers can exploit CVE-2026-0415 to make unauthorized modifications of the router's software and functionality.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203