1.1
CVE-2026-0403
- EPSS 0.07%
- Veröffentlicht 13.01.2026 16:16:10
- Zuletzt bearbeitet 14.01.2026 16:26:00
- Quelle a2826606-91e7-4eb6-899e-8484bd
- CVE-Watchlists
- Unerledigt
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerNETGEAR
≫
Produkt
RBR750
Default Statusunaffected
Version <=
4.6.14.3
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBS750
Default Statusunaffected
Version <=
4.6.14.3
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBRE960
Default Statusunaffected
Version <
v7.2.7.15
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBSE960
Default Statusunaffected
Version <
v7.2.7.15
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBR850
Default Statusunaffected
Version <
V7.2.8.5
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBS850
Default Statusunaffected
Version <
V7.2.8.5
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBE971
Default Statusunaffected
Version <
v9.10.0.2
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBE970
Default Statusunaffected
Version <
v9.10.0.2
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBR860
Default Statusunaffected
Version <
v7.2.8.5
Version
0
Status
affected
HerstellerNETGEAR
≫
Produkt
RBS860
Default Statusunaffected
Version <
v7.2.8.5
Version
0
Status
affected
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.07% | 0.215 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| a2826606-91e7-4eb6-899e-8484bd4575d5 | 1.1 | 0 | 0 |
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.