Vulnerability Description
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Rbe370 Firmware | < 12.1.2.1 |
| Netgear | Rbe370 | - |
| Netgear | Rbe770 Firmware | < 10.5.20.10 |
| Netgear | Rbe770 | - |
| Netgear | Rbr750 Firmware | < 7.2.8.5 |
| Netgear | Rbr750 | - |
| Netgear | Rbr840 Firmware | < 7.2.8.5 |
| Netgear | Rbr840 | - |
| Netgear | Rbr850 Firmware | < 7.2.8.5 |
| Netgear | Rbr850 | - |
| Netgear | Rbr860 Firmware | < 7.2.8.5 |
| Netgear | Rbr860 | - |
| Netgear | Rbre950 Firmware | < 7.2.8.5 |
| Netgear | Rbre950 | - |
| Netgear | Rbre960 Firmware | < 7.2.8.5 |
| Netgear | Rbre960 | - |
| Netgear | Rbs750 Firmware | < 7.2.8.5 |
| Netgear | Rbs750 | - |
| Netgear | Rbs840 Firmware | < 7.2.8.5 |
| Netgear | Rbs840 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-AdvisoryVendor Advisory
- https://www.netgear.com/support/product/rbe372/Product
- https://www.netgear.com/support/product/rbe770/Product
- https://www.netgear.com/support/product/rbr750/Product
- https://www.netgear.com/support/product/rbr840/Product
- https://www.netgear.com/support/product/rbr850/Product
- https://www.netgear.com/support/product/rbr860/Product
- https://www.netgear.com/support/product/rbre950/Product
- https://www.netgear.com/support/product/rbre960/Product
- https://www.netgear.com/support/product/rbs750/Product
- https://www.netgear.com/support/product/rbs840/Product
- https://www.netgear.com/support/product/rbs850/Product
- https://www.netgear.com/support/product/rbs860/Product
- https://www.netgear.com/support/product/rbse950/Product
- https://www.netgear.com/support/product/rbse960/Product
FAQ
What is CVE-2026-0413?
CVE-2026-0413 is a vulnerability with a CVSS score of 4.5 (MEDIUM). A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification o...
How severe is CVE-2026-0413?
CVE-2026-0413 has been rated MEDIUM with a CVSS base score of 4.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-0413?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Rbe370 Firmware, Netgear Rbe370, Netgear Rbe770 Firmware, Netgear Rbe770, Netgear Rbr750 Firmware.