Description
An authentication bypass vulnerability in NETGEAR Orbi devices allows
users connected to the local network to access the router web interface
as an admin.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NETGEAR | RBE970 | < v9.13.2.1 | v9.13.2.1 |
| NETGEAR | RBE971 | < v9.13.2.1 | v9.13.2.1 |
| NETGEAR | CBR750 | < V4.6.14.8 | V4.6.14.8 |
| NETGEAR | NBR750 | < V4.6.15.14 | V4.6.15.14 |
| NETGEAR | RBE770 | < v10.5.20.7 | v10.5.20.7 |
| NETGEAR | RBE771 | < v10.5.20.7 | v10.5.20.7 |
| NETGEAR | RBE772 | < v10.5.20.7 | v10.5.20.7 |
| NETGEAR | RBE773 | < v10.5.20.7 | v10.5.20.7 |
| NETGEAR | RBR750 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBS750 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBR840 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBS840 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBR850 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBS850 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBR860 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBS860 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBRE950 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBSE950 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBRE960 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBSE960 | < v7.2.8.2 | v7.2.8.2 |
| NETGEAR | RBE370 | < v12.1.3.11 | v12.1.3.11 |
| NETGEAR | RBE371 | < v12.1.3.11 | v12.1.3.11 |
| NETGEAR | RBE372 | < v12.1.3.11 | v12.1.3.11 |
| NETGEAR | RBE373 | < v12.1.3.11 | v12.1.3.11 |
| NETGEAR | RBE374 | < v12.1.3.11 | v12.1.3.11 |
References
- https://www.netgear.com/support/product/rbe971 patch product
- https://www.netgear.com/support/product/rbe970 patch product
- https://www.netgear.com/support/product/cbr750 patch product
- https://www.netgear.com/support/product/nbr750 patch product
- https://www.netgear.com/support/product/rbe770 patch product
- https://www.netgear.com/support/product/rbe771 patch product
- https://www.netgear.com/support/product/rbe772 patch product
- https://www.netgear.com/support/product/rbe773 patch product
- https://www.netgear.com/support/product/rbr750 patch product
- https://www.netgear.com/support/product/rbs750 patch product
- https://www.netgear.com/support/product/rbr840 patch product
- https://www.netgear.com/support/product/rbs840 patch product
- https://www.netgear.com/support/product/rbr850 patch product
- https://www.netgear.com/support/product/rbs850 patch product
- https://www.netgear.com/support/product/rbr860 patch product
- https://www.netgear.com/support/product/rbs860 patch product
- https://www.netgear.com/support/product/rbre950 patch product
- https://www.netgear.com/support/product/rbse950 patch product
- https://www.netgear.com/support/product/rbre960 patch product
- https://www.netgear.com/support/product/rbse960 patch product
- https://www.netgear.com/support/product/rbe370 patch product
- https://www.netgear.com/support/product/rbe371 patch product
- https://www.netgear.com/support/product/rbe372 patch product
- https://www.netgear.com/support/product/rbe373 patch product
- https://www.netgear.com/support/product/rbe374 patch product
- https://kb.netgear.com/000070442/January-2026-NETGEAR-Security-Advisory vendor-advisory