CVE-2026-3088

Published: Jun 9, 2026Modified: Jun 18, 2026

4.9

Vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:AmberShow less

Source: a2826606-91e7-4eb6-899e-8484bd4575d5 (Secondary)

Description

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

Affected (8)

Products: Netgear: Rbe970 Firmware, Rbe971 Firmware, Rbr860 Firmware, Rbre950 Firmware, Rbre960 Firmware, Rbs860 Firmware, Rbse950 Firmware, Rbse960 Firmware

8 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbe970 Firmware	Before 9.10.1.4

Running on/with	Platform Versions
Netgear Rbe970	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbe971 Firmware	Before 9.10.1.4

Running on/with	Platform Versions
Netgear Rbe971	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbr860 Firmware	Before 7.2.7.15

Running on/with	Platform Versions
Netgear Rbr860	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbre950 Firmware	Before 7.2.7.15

Running on/with	Platform Versions
Netgear Rbre950	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbre960 Firmware	Before 7.2.7.15

Running on/with	Platform Versions
Netgear Rbre960	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbs860 Firmware	Before 7.2.7.15

Running on/with	Platform Versions
Netgear Rbs860	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbse950 Firmware	Before 7.2.7.15

Running on/with	Platform Versions
Netgear Rbse950	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netgear Rbse960 Firmware	Before 7.2.7.15

Running on/with	Platform Versions
Netgear Rbse960	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.