High severity7.8NVD Advisory· Published Jan 13, 2026· Updated Jun 17, 2026

CVE-2026-0405

Description

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgear/Cbr750 Firmware
cpe:2.3:o:netgear:cbr750_firmware:*:*:*:*:*:*:*:*
Range: <4.6.14.8
Netgear/Nbr750 Firmware
cpe:2.3:o:netgear:nbr750_firmware:*:*:*:*:*:*:*:*
Range: <4.6.15.14
Netgear/Rbe370 Firmware
cpe:2.3:o:netgear:rbe370_firmware:*:*:*:*:*:*:*:*
Range: <12.1.3.11
Netgear/Rbe371 Firmware
cpe:2.3:o:netgear:rbe371_firmware:*:*:*:*:*:*:*:*
Range: <12.1.3.11
Netgear/Rbe372 Firmware
cpe:2.3:o:netgear:rbe372_firmware:*:*:*:*:*:*:*:*
Range: <12.1.3.11
Netgear/Rbe373 Firmware
cpe:2.3:o:netgear:rbe373_firmware:*:*:*:*:*:*:*:*
Range: <12.1.3.11
Netgear/Rbe374 Firmware
cpe:2.3:o:netgear:rbe374_firmware:*:*:*:*:*:*:*:*
Range: <12.1.3.11
Netgear/Rbe770 Firmware
cpe:2.3:o:netgear:rbe770_firmware:*:*:*:*:*:*:*:*
Range: <10.5.20.7
Netgear/Rbe771 Firmware
cpe:2.3:o:netgear:rbe771_firmware:*:*:*:*:*:*:*:*
Range: <10.5.20.7
Netgear/Rbe772 Firmware
cpe:2.3:o:netgear:rbe772_firmware:*:*:*:*:*:*:*:*
Range: <10.5.20.7
Netgear/Rbe773 Firmware
cpe:2.3:o:netgear:rbe773_firmware:*:*:*:*:*:*:*:*
Range: <10.5.20.7
Netgear/Rbe970 Firmware
cpe:2.3:o:netgear:rbe970_firmware:*:*:*:*:*:*:*:*
Range: <9.13.2.1
Netgear/Rbe971 Firmware
cpe:2.3:o:netgear:rbe971_firmware:*:*:*:*:*:*:*:*
Range: <9.13.2.1
Netgear/Rbr750 Firmware
cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbr840 Firmware
cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbr850 Firmware
cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbr860 Firmware
cpe:2.3:o:netgear:rbr860_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbre950 Firmware
cpe:2.3:o:netgear:rbre950_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbre960 Firmware
cpe:2.3:o:netgear:rbre960_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbs750 Firmware
cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbs840 Firmware
cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbs850 Firmware
cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbs860 Firmware
cpe:2.3:o:netgear:rbs860_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbse950 Firmware
cpe:2.3:o:netgear:rbse950_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Rbse960 Firmware
cpe:2.3:o:netgear:rbse960_firmware:*:*:*:*:*:*:*:*
Range: <7.2.8.2
Netgear/Orbillm-fuzzy
Netgear/CBR750cpe-rescue
Range: 0
NETGEAR/NBR750v5
Range: 0
Netgear/RBE372cpe-rescue5 versions
0+ 4 more
- (no CPE)range: 0
- (no CPE)range: 0
- (no CPE)range: 0
- (no CPE)range: 0
- (no CPE)range: 0
Netgear/RBE770cpe-rescue4 versions
0+ 3 more
- (no CPE)range: 0
- (no CPE)range: 0
- (no CPE)range: 0
- (no CPE)range: 0
Netgear/RBE970cpe-rescue2 versions
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0
Netgear/RBR750cpe-rescue
Range: 0
Netgear/RBR840cpe-rescue
Range: 0
Netgear/RBR850cpe-rescue
Range: 0
Netgear/RBR860cpe-rescue
Range: 0
Netgear/RBRE950cpe-rescue
Range: 0
Netgear/RBRE960cpe-rescue
Range: 0
Netgear/RBS750cpe-rescue
Range: 0
Netgear/RBS840cpe-rescue
Range: 0
Netgear/RBS850cpe-rescue
Range: 0
Netgear/RBS860cpe-rescue
Range: 0
Netgear/RBSE950cpe-rescue
Range: 0
Netgear/RBSE960cpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

kb.netgear.com/000070442/January-2026-NETGEAR-Security-AdvisorynvdPatchVendor Advisory
www.netgear.com/support/product/cbr750nvdPatchProduct
www.netgear.com/support/product/nbr750nvdPatchProduct
www.netgear.com/support/product/rbe370nvdPatchProduct
www.netgear.com/support/product/rbe371nvdPatchProduct
www.netgear.com/support/product/rbe372nvdPatchProduct
www.netgear.com/support/product/rbe373nvdPatchProduct
www.netgear.com/support/product/rbe374nvdPatchProduct
www.netgear.com/support/product/rbe770nvdPatchProduct
www.netgear.com/support/product/rbe771nvdPatchProduct
www.netgear.com/support/product/rbe772nvdPatchProduct
www.netgear.com/support/product/rbe773nvdPatchProduct
www.netgear.com/support/product/rbe970nvdPatchProduct
www.netgear.com/support/product/rbe971nvdPatchProduct
www.netgear.com/support/product/rbr750nvdPatchProduct
www.netgear.com/support/product/rbr840nvdPatchProduct
www.netgear.com/support/product/rbr850nvdPatchProduct
www.netgear.com/support/product/rbr860nvdPatchProduct
www.netgear.com/support/product/rbre950nvdPatchProduct
www.netgear.com/support/product/rbre960nvdPatchProduct
www.netgear.com/support/product/rbs750nvdPatchProduct
www.netgear.com/support/product/rbs840nvdPatchProduct
www.netgear.com/support/product/rbs850nvdPatchProduct
www.netgear.com/support/product/rbs860nvdPatchProduct
www.netgear.com/support/product/rbse950nvdPatchProduct
www.netgear.com/support/product/rbse960nvdPatchProduct

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000