MEDIUM · 6.5

CVE-2026-3088

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

Vulnerability Description

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
NetgearRbe970 Firmware< 9.10.1.4
NetgearRbe970-
NetgearRbe971 Firmware< 9.10.1.4
NetgearRbe971-
NetgearRbr860 Firmware< 7.2.7.15
NetgearRbr860-
NetgearRbre950 Firmware< 7.2.7.15
NetgearRbre950-
NetgearRbre960 Firmware< 7.2.7.15
NetgearRbre960-
NetgearRbs860 Firmware< 7.2.7.15
NetgearRbs860-
NetgearRbse950 Firmware< 7.2.7.15
NetgearRbse950-
NetgearRbse960 Firmware< 7.2.7.15
NetgearRbse960-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2026-3088?

CVE-2026-3088 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

How severe is CVE-2026-3088?

CVE-2026-3088 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-3088?

Check the references section above for vendor advisories and patch information. Affected products include: Netgear Rbe970 Firmware, Netgear Rbe970, Netgear Rbe971 Firmware, Netgear Rbe971, Netgear Rbr860 Firmware.