CVE-2026-0403

No fix known EPSS <1%CVSS 1.1

An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.

Published 2026-01-13 · CVE record · OSV

Products: NETGEAR RBR750, NETGEAR RBS750, NETGEAR RBRE960, NETGEAR RBSE960, NETGEAR RBR850, NETGEAR RBS850, NETGEAR RBE971, NETGEAR RBE970, NETGEAR RBR860, NETGEAR RBS860