Improper input validation in Netgear Rbr750
CVE-2026-0404
An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by de…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.011 (60.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Netgear Rbr750 — versions 0
- Netgear Rbr750_firmware
- Netgear Rbr840 — versions 0
- Netgear Rbr840_firmware
- Netgear Rbr850 — versions 0
- Netgear Rbr850_firmware
- Netgear Rbr860 — versions 0
- Netgear Rbr860_firmware
- Netgear Rbre950 — versions 0
- Netgear Rbre950_firmware
Weakness classification (CWE)
References
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
- a2826606-91e7-4eb6-899e-8484bd4575d5 (Product, product, Patch, patch)
Frequently asked questions
- What is CVE-2026-0404?
- CVE-2026-0404 is a high-severity vulnerability in Netgear Rbr750, classified under Improper Input Validation. CVSS score: 8.0/10. Published 2026-01-13.
- How severe is CVE-2026-0404?
- High severity. CVSS v3 base score is 8.0 out of 10.