Medium severity · published Jun 9, 2026
CVE-2026-0409
Netgear Orbi 370 Series Remote Code Execution vulnerability
6.4
CVSS
0.3%
EPSS
No
On KEV
Description
A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
High
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 17% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
O3
Orbi 370 · NETGEAR
before V12.1.2.7 · source: vendor
RF
Rbe370 Firmware · Netgear
before 12.1.2.7 · source: NVD
RF
Rbe371 Firmware · Netgear
before 12.1.2.7 · source: NVD
RF
Rbe372 Firmware · Netgear
before 12.1.2.7 · source: NVD
RF
Rbe374 Firmware · Netgear
before 12.1.2.7 · source: NVD