CVE-2026-0411
HighCVSS 8.0Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
An information disclosure vulnerability in NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a network-connected user to gain administrator access to the Orbi router.
Risk Assessment
An attacker on the local network could gain full control over the Orbi router, potentially compromising the entire network.
Recommendation
Check for firmware updates from NETGEAR and apply them immediately.
Other vulnerabilities in NETGEAR Orbi
See all- CVE-2026-62655Medium
A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.
- CVE-2026-0409Medium
NETGEAR Orbi 370 series devices are vulnerable to an attack where an attacker who can intercept and tamper with traffic between the router and the Internet can remotely execute commands on the device when the administrator performs specific management actions.
Original NVD description (English source)
An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.