6.5

CVE-2026-3088

Unauthenticated users can disrupt router operation

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
NetgearRbe970 Firmware Version < 9.10.1.4
   NetgearRbe970 Version-
NetgearRbe971 Firmware Version < 9.10.1.4
   NetgearRbe971 Version-
NetgearRbr860 Firmware Version < 7.2.7.15
   NetgearRbr860 Version-
NetgearRbre950 Firmware Version < 7.2.7.15
   NetgearRbre950 Version-
NetgearRbre960 Firmware Version < 7.2.7.15
   NetgearRbre960 Version-
NetgearRbs860 Firmware Version < 7.2.7.15
   NetgearRbs860 Version-
NetgearRbse950 Firmware Version < 7.2.7.15
   NetgearRbse950 Version-
NetgearRbse960 Firmware Version < 7.2.7.15
   NetgearRbse960 Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.274
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NETGEAR 4.9 0 0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.netgear.com/support/product/rbre950/
Product
https://www.netgear.com/support/product/rbre960/
Product
https://www.netgear.com/support/product/rbr860/
Product
https://www.netgear.com/support/product/rbse960/
Product
https://www.netgear.com/support/product/rbse950/
Product
https://www.netgear.com/support/product/rbs860/
Product
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
Vendor Advisory