Vulnerability Description
A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Rbe370 Firmware | < 12.1.2.7 |
| Netgear | Rbe370 | - |
| Netgear | Rbe371 Firmware | < 12.1.2.7 |
| Netgear | Rbe371 | - |
| Netgear | Rbe372 Firmware | < 12.1.2.7 |
| Netgear | Rbe372 | - |
| Netgear | Rbe374 Firmware | < 12.1.2.7 |
| Netgear | Rbe374 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-AdvisoryVendor Advisory
- https://www.netgear.com/support/product/rbe372/Product
FAQ
What is CVE-2026-0409?
CVE-2026-0409 is a vulnerability with a CVSS score of 6.4 (MEDIUM). A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator...
How severe is CVE-2026-0409?
CVE-2026-0409 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-0409?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Rbe370 Firmware, Netgear Rbe370, Netgear Rbe371 Firmware, Netgear Rbe371, Netgear Rbe372 Firmware.