Log in Start free

Vulnerability · Published Jun 9, 2026 · Assigned by NETGEAR

CVE-2026-0411A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites

Medium 4.2

In plain English

A medium-severity information exposure in RBE970 from NETGEAR. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).

Severity (CVSS 4.0)4.2Medium
Exploit odds (30 days)0.3%top 79.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.

Affected products (as reported)

VendorProductVersions
NETGEAR RBE970 0 – before 6.3.8.11
NETGEAR RBR350 0 – before V4.4.2.2
NETGEAR RBR760 0 – before V6.3.8.11
NETGEAR RBS350 0 – before V4.4.2.2
NETGEAR RBS760 0 – before V6.3.8.11

Weakness: CWE-200 · Vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H/E:U

References