An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
History

Thu, 12 Feb 2026 17:45:00 +0000

Type Values Removed Values Added
First Time appeared Netgear cbr750 Firmware
Netgear nbr750 Firmware
Netgear rbe370 Firmware
Netgear rbe371 Firmware
Netgear rbe372 Firmware
Netgear rbe373 Firmware
Netgear rbe374 Firmware
Netgear rbe770 Firmware
Netgear rbe771 Firmware
Netgear rbe772 Firmware
Netgear rbe773 Firmware
Netgear rbe970 Firmware
Netgear rbe971 Firmware
Netgear rbr750 Firmware
Netgear rbr840 Firmware
Netgear rbr850 Firmware
Netgear rbr860 Firmware
Netgear rbre950 Firmware
Netgear rbre960 Firmware
Netgear rbs750 Firmware
Netgear rbs840 Firmware
Netgear rbs850 Firmware
Netgear rbs860 Firmware
Netgear rbse950 Firmware
Netgear rbse960 Firmware
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:nbr750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe370:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe371:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe372:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe373:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe374:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe770:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe771:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe772:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe773:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*
Vendors & Products Netgear cbr750 Firmware
Netgear nbr750 Firmware
Netgear rbe370 Firmware
Netgear rbe371 Firmware
Netgear rbe372 Firmware
Netgear rbe373 Firmware
Netgear rbe374 Firmware
Netgear rbe770 Firmware
Netgear rbe771 Firmware
Netgear rbe772 Firmware
Netgear rbe773 Firmware
Netgear rbe970 Firmware
Netgear rbe971 Firmware
Netgear rbr750 Firmware
Netgear rbr840 Firmware
Netgear rbr850 Firmware
Netgear rbr860 Firmware
Netgear rbre950 Firmware
Netgear rbre960 Firmware
Netgear rbs750 Firmware
Netgear rbs840 Firmware
Netgear rbs850 Firmware
Netgear rbs860 Firmware
Netgear rbse950 Firmware
Netgear rbse960 Firmware
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}


Tue, 13 Jan 2026 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Tue, 13 Jan 2026 16:30:00 +0000


Tue, 13 Jan 2026 16:15:00 +0000

Type Values Removed Values Added
Description An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
Title Authentication Bypass in NETGEAR Orbi Devices
First Time appeared Netgear
Netgear cbr750
Netgear nbr750
Netgear rbe370
Netgear rbe371
Netgear rbe372
Netgear rbe373
Netgear rbe374
Netgear rbe770
Netgear rbe771
Netgear rbe772
Netgear rbe773
Netgear rbe970
Netgear rbe971
Netgear rbr750
Netgear rbr840
Netgear rbr850
Netgear rbr860
Netgear rbre950
Netgear rbre960
Netgear rbs750
Netgear rbs840
Netgear rbs850
Netgear rbs860
Netgear rbse950
Netgear rbse960
Weaknesses CWE-287
CPEs cpe:2.3:h:netgear:cbr750:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:nbr750:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe370:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe371:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe372:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe373:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe374:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe770:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe771:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe772:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe773:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe970:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe971:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr840:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr860:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre950:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre960:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs840:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs860:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse950:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse960:*:*:*:*:*:*:*:*
Vendors & Products Netgear
Netgear cbr750
Netgear nbr750
Netgear rbe370
Netgear rbe371
Netgear rbe372
Netgear rbe373
Netgear rbe374
Netgear rbe770
Netgear rbe771
Netgear rbe772
Netgear rbe773
Netgear rbe970
Netgear rbe971
Netgear rbr750
Netgear rbr840
Netgear rbr850
Netgear rbr860
Netgear rbre950
Netgear rbre960
Netgear rbs750
Netgear rbs840
Netgear rbs850
Netgear rbs860
Netgear rbse950
Netgear rbse960
References
Metrics cvssV4_0

{'score': 6.1, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber'}


cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published:

Updated: 2026-02-26T15:04:44.730Z

Reserved: 2025-12-03T04:16:11.511Z

Link: CVE-2026-0405

cve-icon Vulnrichment

Updated: 2026-01-13T18:50:53.486Z

cve-icon NVD

Status : Analyzed

Published: 2026-01-13T16:16:10.513

Modified: 2026-02-12T17:40:40.530

Link: CVE-2026-0405

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.