Threat Entry Updated 2026-02-12

CVE-2026-0405 - RBR860 Plugin

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

PLUGIN RBR860

CVE-2026-0405

MEDIUM CVSS 6.1 2026-01-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-02-12

CVE-2026-0404 - RBR860 Plugin

An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default.

PLUGIN RBR860

CVE-2026-0404

MEDIUM CVSS 4.8 2026-01-13

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-02-20

CVE-2026-0403 - RBR860 Plugin

An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.

PLUGIN RBR860

CVE-2026-0403

LOW CVSS 1.1 2026-01-13

Risk Score

Open Full Technical Breakdown