Login Request a demo
Medium severity · published Jul 14, 2026
CVE-2026-62655
A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models
5.7
CVSS
0.3%
EPSS
No
On KEV
Description
A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RB
RBE970 · NETGEAR
before V9.10.1.4 · source: vendor
RB
RBE971 · NETGEAR
before V9.10.1.4 · source: vendor
RB
RBR860 · NETGEAR
before V7.2.7.15 · source: vendor
RB
RBRE950 · NETGEAR
before v7.2.7.15 · source: vendor
RB
RBRE960 · NETGEAR
before V7.2.7.15 · source: vendor
RB
RBS860 · NETGEAR
before V7.2.7.15 · source: vendor
RB
RBSE950 · NETGEAR
before v7.2.7.15 · source: vendor
RB
RBSE960 · NETGEAR
before V7.2.7.15 · source: vendor
Affected product
RB
RBE970
NETGEAR
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-62655
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-62655
kb.netgear.com
https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory
www.netgear.com
https://www.netgear.com/support/product/rbr860/
www.netgear.com
https://www.netgear.com/support/product/rbre950/
www.netgear.com
https://www.netgear.com/support/product/rbre960/
www.netgear.com
https://www.netgear.com/support/product/rbs860/
www.netgear.com
https://www.netgear.com/support/product/rbse950/
More from RBE970
8.0
CVE-2026-0411
A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites
6.5
CVE-2026-3088
Unauthenticated users can disrupt router operation
4.5
CVE-2026-0415
Insufficient input validation vulnerability in certain Orbi routers
4.5
CVE-2026-0414
Insufficient Input Validation Allows Unauthorized Modification of Router Software in certain NETGEAR Routers