Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

Project Subscriptions

Vendors Products
Netgear Subscribe
Rbe970 Firmware Subscribe
Rbe971 Firmware Subscribe
Rbr860 Firmware Subscribe
Rbre950 Subscribe
Rbre950 Firmware Subscribe
Rbre960 Subscribe
Rbre960 Firmware Subscribe
Rbre970 Subscribe
Rbre971 Subscribe
Rbs860 Firmware Subscribe
Rbse950 Subscribe
Rbse950 Firmware Subscribe
Rbse960 Subscribe
Rbse960 Firmware Subscribe
Advisories

No advisories yet.

Fixes

Solution

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionRBE970 Orbi Quad-band Mesh WiFi 7 Add-on Satellite V9.10.1.4 https://www.netgear.com/support/product/rbe970/ RBE971 Orbi Quad-band Mesh WiFi 7 Router V9.10.1.4 https://www.netgear.com/support/product/rbe971/ RBR860 Orbi Tri-band Mesh WiFi 6 Router – 860 Series V7.2.7.15 https://www.netgear.com/support/product/rbr860/ RBRE950 Orbi Quad-band Mesh WiFi 6E Router v7.2.7.15 https://www.netgear.com/support/product/rbre950/ RBRE960 Orbi Quad-band Mesh WiFi 6E Router V7.2.7.15 https://www.netgear.com/support/product/rbre960/ RBS860 Orbi Tri-band Mesh WiFi 6 Add-on Satellite – 860 Series V7.2.7.15 https://www.netgear.com/support/product/rbs860/ RBSE950 Orbi Quad-band Mesh WiFi 6E Add-on Satellite v7.2.7.15 https://www.netgear.com/support/product/rbse950/ RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite V7.2.7.15 https://www.netgear.com/support/product/rbse960/


Workaround

No workaround given by the vendor.

History

Wed, 10 Jun 2026 19:15:00 +0000

Type Values Removed Values Added
References

Tue, 09 Jun 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Netgear
Netgear rbr860
Netgear rbre950
Netgear rbre960
Netgear rbre970
Netgear rbre971
Netgear rbs860
Netgear rbse950
Netgear rbse960
Vendors & Products Netgear
Netgear rbr860
Netgear rbre950
Netgear rbre960
Netgear rbre970
Netgear rbre971
Netgear rbs860
Netgear rbse950
Netgear rbse960

Tue, 09 Jun 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 09 Jun 2026 16:30:00 +0000

Type Values Removed Values Added
Description Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
Title Unauthenticated users can disrupt router operation
Weaknesses CWE-787
References
Metrics cvssV4_0

{'score': 4.9, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published:

Updated: 2026-06-10T18:10:51.832Z

Reserved: 2026-02-24T00:11:29.678Z

Link: CVE-2026-3088

cve-icon Vulnrichment

Updated: 2026-06-09T17:34:53.277Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-09T17:17:05.800

Modified: 2026-07-23T08:10:00.137

Link: CVE-2026-3088

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-09T20:20:26Z

Weaknesses