Vulnerability · Published Jun 9, 2026 · Assigned by NETGEAR
CVE-2026-0409Netgear Orbi 370 Series Remote Code Execution vulnerability
Medium 4.8
In plain English
A medium-severity memory corruption in Orbi 370 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Severity (CVSS 4.0)4.8Medium
Exploit odds (30 days)0.3%top 82.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.
Affected products (as reported)
Weakness: CWE-119 · Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
References
- https://www.netgear.com/support/product/rbe372/ product, patch
- https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory vendor-advisory