Netgear Rbre960 vulnerabilities
9 vulnerabilities
Known vulnerabilities in Netgear Rbre960, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-45515netgearex7500_firmware+11
EPSS score0.44%
Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, RBRE960 before 6.0.3.68, RBSE960 before 6.0.3.68, RBR750 before 3.2.17.12, RBR850 before 3.2.17.12, RBS750 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, and RBK852 before 3.2.17.12.CVE-2026-62655netgearrbe970_firmware+7EPSS score0.33%
A
security flaw was found in certain NETGEAR Orbi models that
could allow an unauthorized user to cause the device to stop responding or
restart unexpectedly, disrupting network connectivity and making the device
temporarily unavailable.CVE-2026-0413netgearrbe370_firmware+13EPSS score0.32%
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.CVE-2026-0418netgearcbr750_firmware+34EPSS score0.24%
Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network
to tamper with the system.CVE-2026-0405netgearcbr750_firmware+24EPSS score0.36%
An authentication bypass vulnerability in NETGEAR Orbi devices allows
users connected to the local network to access the router web interface
as an admin.CVE-2026-0403netgearrbe970_firmware+9EPSS score0.33%
An insufficient input validation vulnerability in NETGEAR Orbi routers
allows attackers connected to the router's LAN to execute OS command
injections.CVE-2026-0415netgearrbe970_firmware+12EPSS score0.23%
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.CVE-2026-0404netgearrbr750_firmware+11EPSS score1.06%
An insufficient input validation vulnerability in NETGEAR Orbi devices'
DHCPv6 functionality allows network adjacent attackers authenticated
over WiFi or on LAN to execute OS command injections on the router.
DHCPv6 is not enabled by default.CVE-2026-3088netgearrbe970_firmware+7EPSS score0.41%
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.