CVE-2026-0403 LOW

CVE-2026-0403: Insufficient input validation in NETGEAR Orbi routers

Vendor Netgear
Product RBR750
Weakness CWE-20 · Input validation
Published January 13, 2026
Last update February 26, 2026
View on NVD All CVEs

CVSS base score

1.1/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber

What the vulnerability does

01Description

An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.

Key dates

02Disclosure timeline

January 13, 2026 CVE published
February 26, 2026 Record updated