CVE-2026-0413

Tuesday, June 09, 2026

4.3

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U

Summary

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected Software

Vendor	Product	Version Range	Status
NETGEAR	RBE370	`0 < V12.1.2.1`	affected
NETGEAR	RBE770	`0 < V10.5.20.10`	affected
NETGEAR	RBR750	`0 < V7.2.8.5`	affected
NETGEAR	RBR840	`0 < V7.2.8.5`	affected
NETGEAR	RBR850	`0 < V7.2.8.5`	affected
NETGEAR	RBR860	`0 < V7.2.8.5`	affected
NETGEAR	RBRE950	`0 < V7.2.8.5`	affected
NETGEAR	RBRE960	`0 < V7.2.8.5`	affected
NETGEAR	RBS750	`0 < V7.2.8.5`	affected
NETGEAR	RBS840	`0 < V7.2.8.5`	affected
NETGEAR	RBS850	`0 < V7.2.8.5`	affected
NETGEAR	RBS860	`0 < V7.2.8.5`	affected
NETGEAR	RBSE950	`0 < V7.2.8.5`	affected
NETGEAR	RBSE960	`0 < V7.2.8.5`	affected

Weaknesses

CWE-121: CWE-121 Stack-based buffer overflow

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: none
- Automatable: no
- Technical Impact: partial

References

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.