Login Request a demo
High severity · published Jun 9, 2026
CVE-2026-0411
A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites
8.0
CVSS
0.3%
EPSS
No
On KEV
Description
An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RB
RBE970 · NETGEAR
before 6.3.8.11 · source: vendor
RB
RBR350 · NETGEAR
before V4.4.2.2 · source: vendor
RB
RBR760 · NETGEAR
before V6.3.8.11 · source: vendor
RB
RBS350 · NETGEAR
before V4.4.2.2 · source: vendor
RB
RBS760 · NETGEAR
before V6.3.8.11 · source: vendor
RF
Rbe970 Firmware · Netgear
before 9.13.2.1 · source: NVD
RF
Rbr350 Firmware · Netgear
before 4.4.2.2 · source: NVD
RF
Rbr760 Firmware · Netgear
before 6.3.8.11 · source: NVD
RF
Rbs350 Firmware · Netgear
before 4.4.2.2 · source: NVD
RF
Rbs760 Firmware · Netgear
before 6.3.8.11 · source: NVD
Affected product
RB
RBE970
NETGEAR
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-0411
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-0411
Vendor Advisory
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
Product
https://www.netgear.com/support/product/rbe970/
Product
https://www.netgear.com/support/product/rbr350/
Product
https://www.netgear.com/support/product/rbr760/
Product
https://www.netgear.com/support/product/rbs350/
Product
https://www.netgear.com/support/product/rbs760/
More from RBE970
6.5
CVE-2026-3088
Unauthenticated users can disrupt router operation
5.7
CVE-2026-62655
A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models
4.5
CVE-2026-0415
Insufficient input validation vulnerability in certain Orbi routers
4.5
CVE-2026-0414
Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers