Vulnerability Description
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgear | Rbe970 Firmware | < 9.10.1.4 |
| Netgear | Rbe970 | - |
| Netgear | Rbe971 Firmware | < 9.10.1.4 |
| Netgear | Rbe971 | - |
| Netgear | Rbr860 Firmware | < 7.2.7.15 |
| Netgear | Rbr860 | - |
| Netgear | Rbre950 Firmware | < 7.2.7.15 |
| Netgear | Rbre950 | - |
| Netgear | Rbre960 Firmware | < 7.2.7.15 |
| Netgear | Rbre960 | - |
| Netgear | Rbs860 Firmware | < 7.2.7.15 |
| Netgear | Rbs860 | - |
| Netgear | Rbse950 Firmware | < 7.2.7.15 |
| Netgear | Rbse950 | - |
| Netgear | Rbse960 Firmware | < 7.2.7.15 |
| Netgear | Rbse960 | - |
Related Weaknesses (CWE)
References
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-AdvisoryVendor Advisory
- https://www.netgear.com/support/product/rbr860/Product
- https://www.netgear.com/support/product/rbre950/Product
- https://www.netgear.com/support/product/rbre960/Product
- https://www.netgear.com/support/product/rbs860/Product
- https://www.netgear.com/support/product/rbse950/Product
- https://www.netgear.com/support/product/rbse960/Product
FAQ
What is CVE-2026-3088?
CVE-2026-3088 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
How severe is CVE-2026-3088?
CVE-2026-3088 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-3088?
Check the references section above for vendor advisories and patch information. Affected products include: Netgear Rbe970 Firmware, Netgear Rbe970, Netgear Rbe971 Firmware, Netgear Rbe971, Netgear Rbr860 Firmware.