Netgear Rbr760 Firmware vulnerabilities

CVE-2023-41183 [HIGH] CWE-306 CVE-2023-41183: NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adj NETGEAR Orbi 760 SOAP API Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SOAP API. The issue results from the

CVE-2026-0411 [HIGH] CWE-200 CVE-2026-0411: An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could al An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.

CVE-2026-11814 [MEDIUM] CWE-295 CVE-2026-11814: A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker wi A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device. This issue is limited to certain region-specific SKUs.

CVE-2026-11738 [MEDIUM] CWE-20 CVE-2026-11738: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated admini Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.