CVE-2026-3088: Unauthenticated users can disrupt router operation

Published Jun 9, 2026
·
Updated

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

Affected Software

16 affected components
All of the following
Netgear Rbe970 Firmware<9.10.1.4
Netgear Rbe970
All of the following
Netgear Rbe971 Firmware<9.10.1.4
Netgear Rbe971
All of the following
Netgear Rbr860 Firmware<7.2.7.15
Netgear Rbr860
All of the following
Netgear Rbre950 Firmware<7.2.7.15
Netgear Rbre950
All of the following
Netgear Rbre960 Firmware<7.2.7.15
Netgear RBRE960
All of the following
Netgear Rbs860 Firmware<7.2.7.15
Netgear Rbs860
All of the following
Netgear Rbse950 Firmware<7.2.7.15
Netgear Rbse950
All of the following
Netgear Rbse960 Firmware<7.2.7.15
Netgear RBSE960

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade RBE970 Orbi Quad-band Mesh WiFi 7 Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V9.10.1.4
  2. Upgrade

    Upgrade RBE971 Orbi Quad-band Mesh WiFi 7 Router to a version that resolves this vulnerability.

    Fixed in V9.10.1.4
  3. Upgrade

    Upgrade RBR860 Orbi Tri-band Mesh WiFi 6 Router – 860 Series to a version that resolves this vulnerability.

    Fixed in V7.2.7.15
  4. Upgrade

    Upgrade RBRE950 Orbi Quad-band Mesh WiFi 6E Router to a version that resolves this vulnerability.

    Fixed in v7.2.7.15
  5. Upgrade

    Upgrade RBRE960 Orbi Quad-band Mesh WiFi 6E Router to a version that resolves this vulnerability.

    Fixed in V7.2.7.15
  6. Upgrade

    Upgrade RBS860 Orbi Tri-band Mesh WiFi 6 Add-on Satellite – 860 Series to a version that resolves this vulnerability.

    Fixed in V7.2.7.15
  7. Upgrade

    Upgrade RBSE950 Orbi Quad-band Mesh WiFi 6E Add-on Satellite to a version that resolves this vulnerability.

    Fixed in v7.2.7.15
  8. Upgrade

    Upgrade RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite to a version that resolves this vulnerability.

    Fixed in V7.2.7.15

Event History

Jun 9, 2026
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:17 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-3088?

CVE-2026-3088 has a medium severity rating of 4.9 according to the CVSS score.

2

How do I fix CVE-2026-3088?

To fix CVE-2026-3088, ensure that your router's firmware is updated to the latest version.

3

What impact does CVE-2026-3088 have on router functionality?

CVE-2026-3088 allows unauthenticated users to disrupt router operation, potentially making it unavailable.

4

Who is affected by CVE-2026-3088?

CVE-2026-3088 affects routers that allow unauthenticated access on local networks.

5

When was CVE-2026-3088 published?

CVE-2026-3088 was published on June 9, 2026.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203