CVE-2026-0404

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Jan 13, 2026
Source updated: Feb 26, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Insufficient input validation in NETGEAR Orbi routers

An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

RBRE960

Vendor: NETGEAR
Product: RBRE960
Platforms: Unknown
Default status: unaffected

RBRE960 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBSE960

Vendor: NETGEAR
Product: RBSE960
Platforms: Unknown
Default status: unaffected

RBSE960 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBR850

Vendor: NETGEAR
Product: RBR850
Platforms: Unknown
Default status: unaffected

RBR850 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBS850

Vendor: NETGEAR
Product: RBS850
Platforms: Unknown
Default status: unaffected

RBS850 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBR860

Vendor: NETGEAR
Product: RBR860
Platforms: Unknown
Default status: unaffected

RBR860 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBS860

Vendor: NETGEAR
Product: RBS860
Platforms: Unknown
Default status: unaffected

RBS860 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBRE950

Vendor: NETGEAR
Product: RBRE950
Platforms: Unknown
Default status: unaffected

RBRE950 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBSE950

Vendor: NETGEAR
Product: RBSE950
Platforms: Unknown
Default status: unaffected

RBSE950 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBR750

Vendor: NETGEAR
Product: RBR750
Platforms: Unknown
Default status: unaffected

RBR750 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBS750

Vendor: NETGEAR
Product: RBS750
Platforms: Unknown
Default status: unaffected

RBS750 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBR840

Vendor: NETGEAR
Product: RBR840
Platforms: Unknown
Default status: unaffected

RBR840 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed

RBS840

Vendor: NETGEAR
Product: RBS840
Platforms: Unknown
Default status: unaffected

RBS840 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	v7.2.8.5	Unavailable	None listed