CVE-2026-0409
MediumCVSS 6.4Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
NETGEAR Orbi 370 series devices are vulnerable to an attack where an attacker who can intercept and tamper with traffic between the router and the Internet can remotely execute commands on the device when the administrator performs specific management actions.
Risk Assessment
The risk includes full compromise of the network device, potentially leading to security breaches of the entire home or business network.
Recommendation
Immediately update the firmware of NETGEAR Orbi 370 devices to version V12.1.2.7 or later.
Other vulnerabilities in NETGEAR Orbi 370
See all- CVE-2026-62655Medium
A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.
- CVE-2026-0411High
An information disclosure vulnerability in NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a network-connected user to gain administrator access to the Orbi router.
Original NVD description (English source)
A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.