4.5

CVE-2026-0413

Buffer overflow vulnerability in certain NETGEAR Nighthawk routers

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netgear ≫ Rbe370 Firmware Version < 12.1.2.1
   Netgear ≫ Rbe370 Version-
Netgear ≫ Rbe770 Firmware Version < 10.5.20.10
   Netgear ≫ Rbe770 Version-
Netgear ≫ Rbr750 Firmware Version < 7.2.8.5
   Netgear ≫ Rbr750 Version-
Netgear ≫ Rbr840 Firmware Version < 7.2.8.5
   Netgear ≫ Rbr840 Version-
Netgear ≫ Rbr850 Firmware Version < 7.2.8.5
   Netgear ≫ Rbr850 Version-
Netgear ≫ Rbr860 Firmware Version < 7.2.8.5
   Netgear ≫ Rbr860 Version-
Netgear ≫ Rbre950 Firmware Version < 7.2.8.5
   Netgear ≫ Rbre950 Version-
Netgear ≫ Rbre960 Firmware Version < 7.2.8.5
   Netgear ≫ Rbre960 Version-
Netgear ≫ Rbs750 Firmware Version < 7.2.8.5
   Netgear ≫ Rbs750 Version-
Netgear ≫ Rbs840 Firmware Version < 7.2.8.5
   Netgear ≫ Rbs840 Version-
Netgear ≫ Rbs850 Firmware Version < 7.2.8.5
   Netgear ≫ Rbs850 Version-
Netgear ≫ Rbs860 Firmware Version < 7.2.8.5
   Netgear ≫ Rbs860 Version-
Netgear ≫ Rbse950 Firmware Version < 7.2.8.5
   Netgear ≫ Rbse950 Version-
Netgear ≫ Rbse960 Firmware Version < 7.2.8.5
   Netgear ≫ Rbse960 Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.238
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.5 0.9 3.6
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
NETGEAR 4.3 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

https://www.netgear.com/support/product/rbe372/
Product
https://www.netgear.com/support/product/rbe770/
Product
https://www.netgear.com/support/product/rbr750/
Product
https://www.netgear.com/support/product/rbr840/
Product
https://www.netgear.com/support/product/rbre950/
Product
https://www.netgear.com/support/product/rbr850/
Product
https://www.netgear.com/support/product/rbre960/
Product
https://www.netgear.com/support/product/rbr860/
Product
https://www.netgear.com/support/product/rbse960/
Product
https://www.netgear.com/support/product/rbs750/
Product
https://www.netgear.com/support/product/rbse950/
Product
https://www.netgear.com/support/product/rbs840/
Product
https://www.netgear.com/support/product/rbs860/
Product
https://www.netgear.com/support/product/rbs850/
Product
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
Vendor Advisory