Description
An insufficient input validation vulnerability in NETGEAR Orbi routers
allows attackers connected to the router's LAN to execute OS command
injections.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETGEAR | RBR750 | ≤ 4.6.14.3 | — |
| NETGEAR | RBS750 | ≤ 4.6.14.3 | — |
| NETGEAR | RBRE960 | < v7.2.7.15 | v7.2.7.15 |
| NETGEAR | RBSE960 | < v7.2.7.15 | v7.2.7.15 |
| NETGEAR | RBR850 | < V7.2.8.5 | V7.2.8.5 |
| NETGEAR | RBS850 | < V7.2.8.5 | V7.2.8.5 |
| NETGEAR | RBE971 | < v9.10.0.2 | v9.10.0.2 |
| NETGEAR | RBE970 | < v9.10.0.2 | v9.10.0.2 |
| NETGEAR | RBR860 | < v7.2.8.5 | v7.2.8.5 |
| NETGEAR | RBS860 | < v7.2.8.5 | v7.2.8.5 |
References
- https://www.netgear.com/support/product/rbr750 product patch
- https://www.netgear.com/support/product/rbs750 patch product
- https://www.netgear.com/support/product/rbre960 product patch
- https://www.netgear.com/support/product/rbse960 product patch
- https://www.netgear.com/support/product/rbr850 product patch
- https://www.netgear.com/support/product/rbs850 product patch
- https://www.netgear.com/support/product/rbe971 product patch
- https://www.netgear.com/support/product/rbe970 product patch
- https://www.netgear.com/support/product/rbr860 product patch
- https://www.netgear.com/support/product/rbs860 product patch
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory vendor-advisory