CVE detail
CVE-2026-0404
An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 26.4 · diversity 10.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
13 source links · newest first
- https://www.netgear.com/support/product/rbse960www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbse950www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbs860www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbs850www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbs840www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbs750www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbre960www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbre950www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbr860www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbr850www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbr840www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM - https://www.netgear.com/support/product/rbr750www.netgear.com
No excerpt available.
Patchwww.netgear.comJan 13, 2026, 4:16 PM No excerpt available.
Vendor Advisorykb.netgear.comJan 13, 2026, 4:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-0415CVSS 4.3 · Medium
Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of ro…
- CVE-2026-0413CVSS 4.3 · Medium
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauth…
- CVE-2026-0403CVSS 1.1 · Low
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
- CVE-2026-3088CVSS 4.9 · Medium
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
- CVE-2021-45515CVSS 6.5 · Medium
Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, RBRE960 before 6.0.3.68, RBSE960 befor…
- CVE-2020-14442CVSS 8.8 · High
Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25,…