CVE-2026-0405

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
References
Link Resource
https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory Patch Vendor Advisory
https://www.netgear.com/support/product/cbr750 Patch Product
https://www.netgear.com/support/product/nbr750 Patch Product
https://www.netgear.com/support/product/rbe370 Patch Product
https://www.netgear.com/support/product/rbe371 Patch Product
https://www.netgear.com/support/product/rbe372 Patch Product
https://www.netgear.com/support/product/rbe373 Patch Product
https://www.netgear.com/support/product/rbe374 Patch Product
https://www.netgear.com/support/product/rbe770 Patch Product
https://www.netgear.com/support/product/rbe771 Patch Product
https://www.netgear.com/support/product/rbe772 Patch Product
https://www.netgear.com/support/product/rbe773 Patch Product
https://www.netgear.com/support/product/rbe970 Patch Product
https://www.netgear.com/support/product/rbe971 Patch Product
https://www.netgear.com/support/product/rbr750 Patch Product
https://www.netgear.com/support/product/rbr840 Patch Product
https://www.netgear.com/support/product/rbr850 Patch Product
https://www.netgear.com/support/product/rbr860 Patch Product
https://www.netgear.com/support/product/rbre950 Patch Product
https://www.netgear.com/support/product/rbre960 Patch Product
https://www.netgear.com/support/product/rbs750 Patch Product
https://www.netgear.com/support/product/rbs840 Patch Product
https://www.netgear.com/support/product/rbs850 Patch Product
https://www.netgear.com/support/product/rbs860 Patch Product
https://www.netgear.com/support/product/rbse950 Patch Product
https://www.netgear.com/support/product/rbse960 Patch Product
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:nbr750:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe370:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe371:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe372:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe373:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe374:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe770:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe771:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe772:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe773:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*

Configuration 21 (hide)

AND
cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*

Configuration 22 (hide)

AND
cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:*

Configuration 23 (hide)

AND
cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*

Configuration 24 (hide)

AND
cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:*

Configuration 25 (hide)

AND
cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*

History

12 Feb 2026, 17:40

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CPE cpe:2.3:h:netgear:rbr860:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse960:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe773:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe373:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbse950:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe372:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe971:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe970:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe771:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:nbr750:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs840:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs860:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe770:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbr840:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre960:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbre950:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe374:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe371:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:cbr750:-:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe370:-:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:netgear:rbe772:-:*:*:*:*:*:*:*
First Time Netgear rbe771
Netgear rbe772
Netgear nbr750
Netgear rbs850
Netgear rbr860
Netgear rbe371 Firmware
Netgear rbe374 Firmware
Netgear rbs840
Netgear rbe374
Netgear rbr850 Firmware
Netgear rbe373
Netgear rbs850 Firmware
Netgear rbs860 Firmware
Netgear rbre960 Firmware
Netgear rbr860 Firmware
Netgear rbe771 Firmware
Netgear rbe370
Netgear rbs750 Firmware
Netgear rbre960
Netgear rbe773 Firmware
Netgear nbr750 Firmware
Netgear rbe371
Netgear rbe372 Firmware
Netgear rbr750 Firmware
Netgear cbr750 Firmware
Netgear rbs750
Netgear rbs860
Netgear rbse960 Firmware
Netgear rbe772 Firmware
Netgear rbre950
Netgear rbr750
Netgear rbe370 Firmware
Netgear rbr840 Firmware
Netgear rbs840 Firmware
Netgear rbe971 Firmware
Netgear
Netgear rbse960
Netgear rbe970 Firmware
Netgear cbr750
Netgear rbe770 Firmware
Netgear rbe970
Netgear rbr850
Netgear rbr840
Netgear rbe372
Netgear rbe373 Firmware
Netgear rbse950 Firmware
Netgear rbse950
Netgear rbe971
Netgear rbe770
Netgear rbe773
Netgear rbre950 Firmware
References () https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory - () https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory - Patch, Vendor Advisory
References () https://www.netgear.com/support/product/cbr750 - () https://www.netgear.com/support/product/cbr750 - Patch, Product
References () https://www.netgear.com/support/product/nbr750 - () https://www.netgear.com/support/product/nbr750 - Patch, Product
References () https://www.netgear.com/support/product/rbe370 - () https://www.netgear.com/support/product/rbe370 - Patch, Product
References () https://www.netgear.com/support/product/rbe371 - () https://www.netgear.com/support/product/rbe371 - Patch, Product
References () https://www.netgear.com/support/product/rbe372 - () https://www.netgear.com/support/product/rbe372 - Patch, Product
References () https://www.netgear.com/support/product/rbe373 - () https://www.netgear.com/support/product/rbe373 - Patch, Product
References () https://www.netgear.com/support/product/rbe374 - () https://www.netgear.com/support/product/rbe374 - Patch, Product
References () https://www.netgear.com/support/product/rbe770 - () https://www.netgear.com/support/product/rbe770 - Patch, Product
References () https://www.netgear.com/support/product/rbe771 - () https://www.netgear.com/support/product/rbe771 - Patch, Product
References () https://www.netgear.com/support/product/rbe772 - () https://www.netgear.com/support/product/rbe772 - Patch, Product
References () https://www.netgear.com/support/product/rbe773 - () https://www.netgear.com/support/product/rbe773 - Patch, Product
References () https://www.netgear.com/support/product/rbe970 - () https://www.netgear.com/support/product/rbe970 - Patch, Product
References () https://www.netgear.com/support/product/rbe971 - () https://www.netgear.com/support/product/rbe971 - Patch, Product
References () https://www.netgear.com/support/product/rbr750 - () https://www.netgear.com/support/product/rbr750 - Patch, Product
References () https://www.netgear.com/support/product/rbr840 - () https://www.netgear.com/support/product/rbr840 - Patch, Product
References () https://www.netgear.com/support/product/rbr850 - () https://www.netgear.com/support/product/rbr850 - Patch, Product
References () https://www.netgear.com/support/product/rbr860 - () https://www.netgear.com/support/product/rbr860 - Patch, Product
References () https://www.netgear.com/support/product/rbre950 - () https://www.netgear.com/support/product/rbre950 - Patch, Product
References () https://www.netgear.com/support/product/rbre960 - () https://www.netgear.com/support/product/rbre960 - Patch, Product
References () https://www.netgear.com/support/product/rbs750 - () https://www.netgear.com/support/product/rbs750 - Patch, Product
References () https://www.netgear.com/support/product/rbs840 - () https://www.netgear.com/support/product/rbs840 - Patch, Product
References () https://www.netgear.com/support/product/rbs850 - () https://www.netgear.com/support/product/rbs850 - Patch, Product
References () https://www.netgear.com/support/product/rbs860 - () https://www.netgear.com/support/product/rbs860 - Patch, Product
References () https://www.netgear.com/support/product/rbse950 - () https://www.netgear.com/support/product/rbse950 - Patch, Product
References () https://www.netgear.com/support/product/rbse960 - () https://www.netgear.com/support/product/rbse960 - Patch, Product

13 Jan 2026, 17:15

Type Values Removed Values Added
References
  • () https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory -

13 Jan 2026, 16:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-01-13 16:16

Updated : 2026-02-12 17:40


NVD link : CVE-2026-0405

Mitre link : CVE-2026-0405

CVE.ORG link : CVE-2026-0405


JSON object : View

Products Affected

netgear

  • rbe373
  • rbr850
  • rbe371_firmware
  • rbr860
  • rbs860
  • rbe372_firmware
  • rbs850_firmware
  • rbe771
  • rbs750_firmware
  • rbe770
  • rbs750
  • rbe772_firmware
  • rbe773
  • rbe970_firmware
  • rbe971
  • rbr860_firmware
  • rbs840
  • rbr850_firmware
  • rbe371
  • rbe373_firmware
  • rbe771_firmware
  • rbe374
  • rbe970
  • rbs860_firmware
  • rbe374_firmware
  • nbr750_firmware
  • cbr750
  • rbse950
  • rbse960
  • rbe773_firmware
  • rbre950_firmware
  • rbr750
  • nbr750
  • rbse960_firmware
  • rbr840
  • rbre960_firmware
  • rbs840_firmware
  • cbr750_firmware
  • rbse950_firmware
  • rbe370
  • rbe372
  • rbe772
  • rbre950
  • rbr750_firmware
  • rbr840_firmware
  • rbre960
  • rbe370_firmware
  • rbe971_firmware
  • rbs850
  • rbe770_firmware
CWE
CWE-287

Improper Authentication

NVD-CWE-noinfo