← Back

CVE-2026-0409

nvd nist
Published: Jun 9, 2026Modified: Jun 18, 2026

JSON object

Loading...
4.8
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Show more
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less
Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.

Affected (4)

Netgear
4 products
Rbe370 Firmware
Rbe371 Firmware
Rbe372 Firmware
Rbe374 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rbe370 Firmware
Before 12.1.2.7
Running on/withPlatform Versions
Netgear
Rbe370
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rbe371 Firmware
Before 12.1.2.7
Running on/withPlatform Versions
Netgear
Rbe371
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rbe372 Firmware
Before 12.1.2.7
Running on/withPlatform Versions
Netgear
Rbe372
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rbe374 Firmware
Before 12.1.2.7
Running on/withPlatform Versions
Netgear
Rbe374
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

Source: a2826606-91e7-4eb6-899e-8484bd4575d5
Vendor Advisory
Source: a2826606-91e7-4eb6-899e-8484bd4575d5
Product

Timeline

No history available yet.