CVE-2026-0404
Severity CVSS v4.0:
MEDIUM
Type:
CWE-20
Input Validation
Publication date:
13/01/2026
Last modified:
12/02/2026
Description
An insufficient input validation vulnerability in NETGEAR Orbi devices&#39; <br />
DHCPv6 functionality allows network adjacent attackers authenticated <br />
over WiFi or on LAN to execute OS command injections on the router. <br />
DHCPv6 is not enabled by default.
Impact
Base Score 4.0
4.80
Severity 4.0
MEDIUM
Base Score 3.x
8.00
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:* | 7.2.8.5 (excluding) | |
| cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:* | 7.2.8.5 (excluding) | |
| cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:* | 7.2.8.5 (excluding) | |
| cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:* | 7.2.8.5 (excluding) | |
| cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:* | 7.2.8.5 (excluding) | |
| cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:* | 7.2.8.5 (excluding) | |
| cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:* | 7.2.8.5 (excluding) | |
| cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:* | ||
| cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:* | 7.2.8.5 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/rbr750
- https://www.netgear.com/support/product/rbr840
- https://www.netgear.com/support/product/rbr850
- https://www.netgear.com/support/product/rbr860
- https://www.netgear.com/support/product/rbre950
- https://www.netgear.com/support/product/rbre960
- https://www.netgear.com/support/product/rbs750
- https://www.netgear.com/support/product/rbs840
- https://www.netgear.com/support/product/rbs850
- https://www.netgear.com/support/product/rbs860
- https://www.netgear.com/support/product/rbse950
- https://www.netgear.com/support/product/rbse960



