Опубликовано: 13 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 1.1
CVSS3: 8
Описание
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2026-0403
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory
- https://www.netgear.com/support/product/rbe970
- https://www.netgear.com/support/product/rbe971
- https://www.netgear.com/support/product/rbr750
- https://www.netgear.com/support/product/rbr850
- https://www.netgear.com/support/product/rbr860
- https://www.netgear.com/support/product/rbre960
- https://www.netgear.com/support/product/rbs750
- https://www.netgear.com/support/product/rbs850
- https://www.netgear.com/support/product/rbs860
- https://www.netgear.com/support/product/rbse960
Связанные уязвимости
CVSS3: 8
nvd
7 месяцев назад
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
CVSS3: 4.3
fstec
7 месяцев назад
Уязвимость микропрограммного обеспечения Wi-Fi систем Netgear Orbi, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю выполнить произвольный код