Netgear Rbre950 vulnerabilities

CVE-2026-0404 [HIGH] CWE-20 CVE-2026-0404: An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default.

CVE-2026-0405 [HIGH] CWE-287 CVE-2026-0405: An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

CVE-2026-3088 [MEDIUM] CWE-787 CVE-2026-3088: Unauthenticated users on the local network can cause the router to become unavailable by sending spe Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

CVE-2026-62655 [MEDIUM] CWE-121 CVE-2026-62655: A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to ca A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.

CVE-2026-0413 [MEDIUM] CWE-121 CVE-2026-0413: A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models al A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

CVE-2026-0415 [MEDIUM] CWE-20 CVE-2026-0415: Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated admini Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.