Description
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
References (15)
Core 15
Core References
Patch product
patch
https://www.netgear.com/support/product/rbe770/
Patch product
patch
https://www.netgear.com/support/product/rbe372/
Patch product
patch
https://www.netgear.com/support/product/rbs840/
Patch product
patch
https://www.netgear.com/support/product/rbr750/
Patch product
patch
https://www.netgear.com/support/product/rbr840/
Patch product
patch
https://www.netgear.com/support/product/rbre950/
Patch product
patch
https://www.netgear.com/support/product/rbr850/
Patch product
patch
https://www.netgear.com/support/product/rbre960/
Patch product
patch
https://www.netgear.com/support/product/rbr860/
Patch product
patch
https://www.netgear.com/support/product/rbse960/
Patch product
patch
https://www.netgear.com/support/product/rbs750/
Patch product
patch
https://www.netgear.com/support/product/rbse950/
Patch product
patch
https://www.netgear.com/support/product/rbs860/
Patch product
patch
https://www.netgear.com/support/product/rbs850/
Vendor Advisory vendor-advisory
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
Scores
CVSS v3
4.5
EPSS
0.0032
EPSS Percentile
24.7%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-121
Status
published
Products (30)
NETGEAR/RBE370
< V12.1.2.1
netgear/rbe370_firmware
< 12.1.2.1
NETGEAR/RBE37X
< V12.1.2.1
NETGEAR/RBE770
< V10.5.20.10
netgear/rbe770_firmware
< 10.5.20.10
NETGEAR/RBE77X
< V10.5.20.10
NETGEAR/RBR750
< V7.2.8.5
netgear/rbr750_firmware
< 7.2.8.5
NETGEAR/RBR840
< V7.2.8.5
netgear/rbr840_firmware
< 7.2.8.5
... and 20 more
Published
Jun 09, 2026
Tracked Since
Jun 09, 2026