A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
| Version | Base score | Base severity | Vector |
|---|---|---|---|
| 4.0 | 4.3 | MEDIUM | CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U |
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionRBE37X Orbi Dual-band Mesh WiFi 7 System – 370 Series V12.1.2.1 https://www.netgear.com/support/product/rbe372/ RBE77X Orbi Tri-band Mesh WiFi 7 Add-on Satellite V10.5.20.10 https://www.netgear.com/support/product/rbe770/ RBR750 Orbi WiFi 6 Router AX4200 V7.2.8.5 https://www.netgear.com/support/product/rbr750/ RBR840 (EoS) Orbi WiFi 6 System AX5700 V7.2.8.5 https://www.netgear.com/support/product/rbr840/ RBR850 Orbi WiFi 6 Router AX6000 V7.2.8.5 https://www.netgear.com/support/product/rbr850/ RBR860 Orbi Tri-band Mesh WiFi 6 Router – 860 Series V7.2.8.5 https://www.netgear.com/support/product/rbr860/ RBRE950 Orbi Quad-band Mesh WiFi 6E Router V7.2.8.5 https://www.netgear.com/support/product/rbre950/ RBRE960 Orbi Quad-band Mesh WiFi 6E Router V7.2.8.5 https://www.netgear.com/support/product/rbre960/ RBS750 Orbi WiFi 6 Add-on Satellite AX4200 V7.2.8.5 https://www.netgear.com/support/product/rbs750/ RBS840 (EoS) Orbi WiFi 6 Add-on Satellite AX5700 V7.2.8.5 https://www.netgear.com/support/product/rbs840/ RBS850 Orbi WiFi 6 Satellite AX6000 V7.2.8.5 https://www.netgear.com/support/product/rbs850/ RBS860 Orbi Tri-band Mesh WiFi 6 Add-on Satellite – 860 Series V7.2.8.5 https://www.netgear.com/support/product/rbs860/ RBSE950 Orbi Quad-band Mesh WiFi 6E Add-on Satellite V7.2.8.5 https://www.netgear.com/support/product/rbse950/ RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite V7.2.8.5 https://www.netgear.com/support/product/rbse960/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.netgear.com/support/product/rbe770/ | product patch |
| https://www.netgear.com/support/product/rbe372/ | product patch |
| https://www.netgear.com/support/product/rbr750/ | product patch |
| https://www.netgear.com/support/product/rbr840/ | product patch |
| https://www.netgear.com/support/product/rbre950/ | product patch |
| https://www.netgear.com/support/product/rbr850/ | product patch |
| https://www.netgear.com/support/product/rbre960/ | product patch |
| https://www.netgear.com/support/product/rbr860/ | product patch |
| https://www.netgear.com/support/product/rbse960/ | product patch |
| https://www.netgear.com/support/product/rbs750/ | product patch |
| https://www.netgear.com/support/product/rbse950/ | product patch |
| https://www.netgear.com/support/product/rbs840/ | product patch |
| https://www.netgear.com/support/product/rbs860/ | product patch |
| https://www.netgear.com/support/product/rbs850/ | product patch |
| https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory | vendor-advisory |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|