Description (CNA)
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| NETGEAR / RBR750 | affected 0 through 4.6.14.3 |
| NETGEAR / RBS750 | affected 0 through 4.6.14.3 |
| NETGEAR / RBRE960 | affected 0 before v7.2.7.15 |
| NETGEAR / RBSE960 | affected 0 before v7.2.7.15 |
| NETGEAR / RBR850 | affected 0 before V7.2.8.5 |
| NETGEAR / RBS850 | affected 0 before V7.2.8.5 |
| NETGEAR / RBE971 | affected 0 before v9.10.0.2 |
| NETGEAR / RBE970 | affected 0 before v9.10.0.2 |
| NETGEAR / RBR860 | affected 0 before v7.2.8.5 |
| NETGEAR / RBS860 | affected 0 before v7.2.8.5 |
CWE
CWE-20
References
- https://www.netgear.com/support/product/rbr750
- https://www.netgear.com/support/product/rbs750
- https://www.netgear.com/support/product/rbre960
- https://www.netgear.com/support/product/rbse960
- https://www.netgear.com/support/product/rbr850
- https://www.netgear.com/support/product/rbs850
- https://www.netgear.com/support/product/rbe971
- https://www.netgear.com/support/product/rbe970
- https://www.netgear.com/support/product/rbr860
- https://www.netgear.com/support/product/rbs860
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
ADP enrichment
No English description supplied.
No references supplied.