CVE-2026-0404

🗓️ 13 Jan 2026 16:01:14Reported by NETGEARType

NETGEAR Orbi DHCPv6 input validation flaw allows command injection via WiFi or LAN; DHCPv6 not enabled by default.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	Netgear Orbi Wi-Fi Code Execution	19 Jan 202600:00	–	bdu_fstec
Circl	CVE-2026-0404	13 Jan 202617:04	–	circl
CNNVD	NETGEAR Orbi security vulnerabilities	13 Jan 202600:00	–	cnnvd
Cvelist	CVE-2026-0404 Insufficient input validation in NETGEAR Orbi routers	13 Jan 202616:01	–	cvelist
EUVD	EUVD-2026-2224	13 Jan 202616:01	–	euvd
NVD	CVE-2026-0404	13 Jan 202616:16	–	nvd
osv_cve	CVE-2026-0404	13 Jan 202616:16	–	osv_cve
Positive Technologies	PT-2026-2627	13 Jan 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-0404: Improper Input Validation	13 Jan 202600:00	–	rapid7
RedhatCVE	CVE-2026-0404	14 Jan 202616:23	–	redhatcve

NVD

CNA

Node

AND

netgear rbr750_firmwareRange<7.2.8.5

netgear rbr750Match-

Node

AND

netgear rbr840_firmwareRange<7.2.8.5

netgear rbr840Match-

Node

AND

netgear rbr850_firmwareRange<7.2.8.5

netgear rbr850Match-

Node

AND

netgear rbr860_firmwareRange<7.2.8.5

netgear rbr860Match-

Node

AND

netgear rbs750_firmwareRange<7.2.8.5

netgear rbs750Match-

Node

AND

netgear rbs840_firmwareRange<7.2.8.5

netgear rbs840Match-

Node

AND

netgear rbs850_firmwareRange<7.2.8.5

netgear rbs850Match-

Node

AND

netgear rbs860_firmwareRange<7.2.8.5

netgear rbs860Match-

Node

AND

netgear rbre950_firmwareRange<7.2.8.5

netgear rbre950Match-

Node

AND

netgear rbre960_firmwareRange<7.2.8.5

netgear rbre960Match-

Node

AND

netgear rbse950_firmwareRange<7.2.8.5

netgear rbse950Match-

Node

AND

netgear rbse960_firmwareRange<7.2.8.5

netgear rbse960Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "RBRE960",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBSE960",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBR850",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBS850",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBR860",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBS860",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBRE950",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBSE950",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBR750",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBS750",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBR840",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "RBS840",
    "vendor": "NETGEAR",
    "versions": [
      {
        "lessThan": "v7.2.8.5",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
netgear	www.netgear.com/support/product/rbre960
netgear	www.netgear.com/support/product/rbse950
netgear	www.netgear.com/support/product/rbr850
netgear	www.netgear.com/support/product/rbse960
netgear	www.netgear.com/support/product/rbre950
netgear	www.netgear.com/support/product/rbs850
netgear	www.netgear.com/support/product/rbs860
netgear	www.netgear.com/support/product/rbr840
netgear	www.netgear.com/support/product/rbs840
kb	www.kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory

17 Jun 2026 10:10Current

8High risk

Vulners AI Score8

CVSS 3.18

CVSS 47.5

EPSS0.01062

SSVC

CWE-20