Netgear Rbre950 Firmware vulnerabilities

2 known vulnerabilities affecting netgear/rbre950_firmware.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2026-0405MEDIUMCVSS 6.1fixed in 7.2.8.22026-01-13

CVE-2026-0405 [MEDIUM] CWE-287 CVE-2026-0405: An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

CVE-2026-0404MEDIUMCVSS 4.8fixed in 7.2.8.52026-01-13

CVE-2026-0404 [MEDIUM] CWE-20 CVE-2026-0404: An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default.