7.8
CVE-2026-0405
- EPSS 0.03%
- Veröffentlicht 13.01.2026 16:16:10
- Zuletzt bearbeitet 12.02.2026 17:40:40
- Quelle a2826606-91e7-4eb6-899e-8484bd
- CVE-Watchlists
- Unerledigt
An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Cbr750 Firmware Version < 4.6.14.8
Netgear ≫ Nbr750 Firmware Version < 4.6.15.14
Netgear ≫ Rbe370 Firmware Version < 12.1.3.11
Netgear ≫ Rbe371 Firmware Version < 12.1.3.11
Netgear ≫ Rbe372 Firmware Version < 12.1.3.11
Netgear ≫ Rbe373 Firmware Version < 12.1.3.11
Netgear ≫ Rbe374 Firmware Version < 12.1.3.11
Netgear ≫ Rbe770 Firmware Version < 10.5.20.7
Netgear ≫ Rbe771 Firmware Version < 10.5.20.7
Netgear ≫ Rbe772 Firmware Version < 10.5.20.7
Netgear ≫ Rbe773 Firmware Version < 10.5.20.7
Netgear ≫ Rbe970 Firmware Version < 9.13.2.1
Netgear ≫ Rbe971 Firmware Version < 9.13.2.1
Netgear ≫ Rbr750 Firmware Version < 7.2.8.2
Netgear ≫ Rbr840 Firmware Version < 7.2.8.2
Netgear ≫ Rbr850 Firmware Version < 7.2.8.2
Netgear ≫ Rbr860 Firmware Version < 7.2.8.2
Netgear ≫ Rbs750 Firmware Version < 7.2.8.2
Netgear ≫ Rbs840 Firmware Version < 7.2.8.2
Netgear ≫ Rbs850 Firmware Version < 7.2.8.2
Netgear ≫ Rbs860 Firmware Version < 7.2.8.2
Netgear ≫ Rbre950 Firmware Version < 7.2.8.2
Netgear ≫ Rbre960 Firmware Version < 7.2.8.2
Netgear ≫ Rbse950 Firmware Version < 7.2.8.2
Netgear ≫ Rbse960 Firmware Version < 7.2.8.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.09 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| a2826606-91e7-4eb6-899e-8484bd4575d5 | 6.1 | 0 | 0 |
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.