{"affected":[{"defaultStatus":"unaffected","product":"RBR750","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThanOrEqual":"4.6.14.3","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBS750","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThanOrEqual":"4.6.14.3","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBRE960","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"v7.2.7.15","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBSE960","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"v7.2.7.15","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBR850","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"V7.2.8.5","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBS850","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"V7.2.8.5","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBE971","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"v9.10.0.2","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBE970","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"v9.10.0.2","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBR860","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"v7.2.8.5","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBS860","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"v7.2.8.5","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-0403","cwes":["CWE-20"],"description":"An insufficient input validation vulnerability in NETGEAR Orbi routers \nallows attackers connected to the router's LAN to execute OS command \ninjections.","epss":{"date":"2026-11-03","percentile":0.26229,"score":0.0033},"exploits":[],"kev":null,"metrics":[{"score":1.1,"severity":"low","source":"CNA: NETGEAR","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber","version":"4.0"}],"modifiedAt":1793751412276,"publishedAt":1768320025831,"references":[{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbr750"},{"source":"CNA: NETGEAR","tags":["patch","product"],"url":"https://www.netgear.com/support/product/rbs750"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbre960"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbse960"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbr850"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbs850"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbe971"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbe970"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbr860"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbs860"},{"source":"CNA: NETGEAR","tags":["vendor-advisory"],"url":"https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory"}],"remediation":[{"kind":"fix","source":"CNA: NETGEAR","text":"Devices with automatic updates enabled may already have this\npatch applied. If not, please check the firmware version and update it to the\nlatest.\n\n\n\nFixed in:\n\nRBE971  firmware 9.10.0.2 or later https://www.netgear.com/support/product/rbe971 \nRBE970  firmware 9.10.0.2 or later https://www.netgear.com/support/product/rbe970 \nRBR750  firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr750 \nRBR850  firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr850 \nRBR860  firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbr860 \nRBS750  firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs750 \nRBS850  firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs850 \nRBS860  firmware 7.2.8.5 or later https://www.netgear.com/support/product/rbs860 \nRBRE960  firmware 7.2.7.15 or later https://www.netgear.com/support/product/rbre960 \nRBSE960  firmware 7.2.7.15 or later https://www.netgear.com/support/product/rbse960"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbr750"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbs750"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbre960"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbse960"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbr850"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbs850"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbe971"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbe970"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbr860"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbs860"}],"revision":"63e4c9122c403aaf4f1261e012808fd4fbd176f4a41f049128b37cb246a29feb","sources":[{"modifiedAt":1793751412276,"name":"CNA: NETGEAR","retrievedAt":1793754642280,"url":"https://www.cve.org/CVERecord?id=CVE-2026-0403"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793748164387,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-0403"}],"ssvc":{"assessedAt":1768366640518,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Insufficient input validation in NETGEAR Orbi routers","updatedAt":1793754642280}