CVE-2026-0405— Authentication Bypass in NETGEAR Orbi Devices
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-0405
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authentication Bypass in NETGEAR Orbi Devices
Source: NVD (National Vulnerability Database)
Vulnerability Description
An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
认证机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
NETGEAR Orbi 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NETGEAR Orbi是美国网件（NETGEAR）公司的一个分布式WiFi系统。 NETGEAR Orbi存在安全漏洞，该漏洞源于身份验证绕过，可能导致本地网络用户以管理员身份访问路由器Web界面。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NETGEAR | RBE970 | 0 ~ v9.13.2.1 | - | |
| NETGEAR | RBE971 | 0 ~ v9.13.2.1 | - | |
| NETGEAR | CBR750 | 0 ~ V4.6.14.8 | - | |
| NETGEAR | NBR750 | 0 ~ V4.6.15.14 | - | |
| NETGEAR | RBE770 | 0 ~ v10.5.20.7 | - | |
| NETGEAR | RBE771 | 0 ~ v10.5.20.7 | - | |
| NETGEAR | RBE772 | 0 ~ v10.5.20.7 | - | |
| NETGEAR | RBE773 | 0 ~ v10.5.20.7 | - | |
| NETGEAR | RBR750 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBS750 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBR840 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBS840 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBR850 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBS850 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBR860 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBS860 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBRE950 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBSE950 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBRE960 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBSE960 | 0 ~ v7.2.8.2 | - | |
| NETGEAR | RBE370 | 0 ~ v12.1.3.11 | - | |
| NETGEAR | RBE371 | 0 ~ v12.1.3.11 | - | |
| NETGEAR | RBE372 | 0 ~ v12.1.3.11 | - | |
| NETGEAR | RBE373 | 0 ~ v12.1.3.11 | - | |
| NETGEAR | RBE374 | 0 ~ v12.1.3.11 | - |
II. Public POCs for CVE-2026-0405
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-0405
请登录查看更多情报信息。
Same Patch Batch · NETGEAR · 2026-01-13 · 6 CVEs total
| CVE-2026-0406 | Insufficient input validation in NETGEAR Nighthawk router XR1000v2 | |
| CVE-2026-0408 | Path traversal vulnerability in Netgear WiFi Range Extenders | |
| CVE-2026-0403 | Insufficient input validation in NETGEAR Orbi routers | |
| CVE-2026-0407 | Authentication bypass in NETGEAR WiFi Range Extenders via network adjacent attacks | |
| CVE-2026-0404 | Insufficient input validation in NETGEAR Orbi routers |
IV. Related Vulnerabilities
Same vendor: NETGEAR
- CVE-2026-24714
NETGEAR PR2000 安全漏洞 - CVE-2026-0404
Insufficient input validation in NETGEAR Orbi routers - CVE-2026-0408
Path traversal vulnerability in Netgear WiFi Range Extenders - CVE-2026-0407
Authentication bypass in NETGEAR WiFi Range Extenders via ne - CVE-2026-0406
Insufficient input validation in NETGEAR Nighthawk router XR
Same weakness: CWE-287
- CVE-2026-8244
Industrial Application Software IAS Canias ERP Login RMI imp - CVE-2026-8216
Industrial Application Software IAS Canias ERP Java RMI Sess - CVE-2026-8214
Industrial Application Software IAS Canias ERP RMI doAction - CVE-2026-42560
auth: Patreon provider assigns the same local user ID to eve - CVE-2026-41070
openvpn-auth-oauth2 returns FUNC_SUCCESS on client-deny, all
V. Comments for CVE-2026-0405
No comments yet