NETGEAR Router Firmware Input Validation Flaw Enables Admin Modifications
CVE-2026-0415 Published on June 9, 2026

Insufficient input validation vulnerability in certain Orbi routers
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Vendor Advisory NVD

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Products Associated with CVE-2026-0415

Want to know whenever a new CVE is published for Netgear products? stack.watch will email you.

Netgear Rbr750

Netgear Rbr840

Netgear Rbr850

Netgear Rbr860

Netgear Rbre950

Netgear Rbre960

Netgear Rbs750

Netgear Rbs840

Netgear Rbs850

Netgear Rbs860

Netgear Rbse950

Netgear Rbse960

Netgear Rbe970

Affected Versions

NETGEAR RBE970:

Before V9.12.4.9 is affected.

NETGEAR RBR750:

Before V7.2.8.5 is affected.

NETGEAR RBR840:

Before V7.2.8.5 is affected.

NETGEAR RBR850:

Before V7.2.8.5 is affected.

NETGEAR RBR860:

Before V7.2.8.5 is affected.

NETGEAR RBRE950:

Before V7.2.8.5 is affected.

NETGEAR RBRE960:

Before V7.2.8.5 is affected.

NETGEAR RBS750:

Before V7.2.8.5 is affected.

NETGEAR RBS840:

Before V7.2.8.5 is affected.

NETGEAR RBS850:

Before V7.2.8.5 is affected.

NETGEAR RBS860:

Before V7.2.8.5 is affected.

NETGEAR RBSE950:

Before V7.2.8.5 is affected.

NETGEAR RBSE960:

Before V7.2.8.5 is affected.

Exploit Probability

EPSS

0.26%

Percentile

16.78%