Medium · 4.9 CVE-2026-3088 EUVD-2026-35456GHSA-r4pc-3chm-q76v

Unauthenticated users can disrupt router operation

Published Jun 9, 2026 · Updated Jun 10, 2026 · Assigned by NETGEAR

Vendor: NETGEAR Product: RBE970 Product: RBE971 Product: RBR860 Product: RBRE950 Product: RBRE960 Product: RBS860 Product: RBSE950 Product: RBSE960 Category: Network devices

Description

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

Affected products

Vendor	Product	Affected	Fixed
NETGEAR	RBR860	V6.3.7.10 – < V7.2.7.15	V7.2.7.15
NETGEAR	RBRE950	< v7.2.7.15	v7.2.7.15
NETGEAR	RBRE960	V6.3.7.10 – < V7.2.7.15	V7.2.7.15
NETGEAR	RBE970	V6.3.7.10 – < V9.10.1.4	V9.10.1.4
NETGEAR	RBE971	V6.3.7.10 – < V9.10.1.4	V9.10.1.4
NETGEAR	RBS860	< V7.2.7.15	V7.2.7.15
NETGEAR	RBSE950	< v7.2.7.15	v7.2.7.15
NETGEAR	RBSE960	< V7.2.7.15	V7.2.7.15

References

https://www.netgear.com/support/product/rbr860/ product patch
https://www.netgear.com/support/product/rbre950/ product patch
https://www.netgear.com/support/product/rbre960/ product patch
https://www.netgear.com/support/product/rbs860/ product patch
https://www.netgear.com/support/product/rbse960/ product patch
https://www.netgear.com/support/product/rbse950/ product patch
https://kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory vendor-advisory