Threat Investigation
Request a demo

CVE-2026-0405

High

Description

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

SeverityHigh
CVSS7.8
Exploit probability—
ProductNetgear Cbr750 Firmware
PublishedJan 13, 2026
First seenJan 13, 2026
Weakness typeCWE-287Improper authentication

How to fix

Update
  • netgear cbr750_firmware4.6.14.8 or later
  • netgear nbr750_firmware4.6.15.14 or later
  • netgear rbe370_firmware12.1.3.11 or later
  • netgear rbe371_firmware12.1.3.11 or later
  • netgear rbe372_firmware12.1.3.11 or later
  • netgear rbe373_firmware12.1.3.11 or later
  • netgear rbe374_firmware12.1.3.11 or later
  • netgear rbe770_firmware10.5.20.7 or later
  • netgear rbe771_firmware10.5.20.7 or later
  • netgear rbe772_firmware10.5.20.7 or later
  • netgear rbe773_firmware10.5.20.7 or later
  • netgear rbe970_firmware9.13.2.1 or later
Patches

Affected products

ProductAffected versionsFixed in
netgear cbr750_firmwarev < 4.6.14.84.6.14.8
netgear nbr750_firmwarev < 4.6.15.144.6.15.14
netgear rbe370_firmwarev < 12.1.3.1112.1.3.11
netgear rbe371_firmwarev < 12.1.3.1112.1.3.11
netgear rbe372_firmwarev < 12.1.3.1112.1.3.11
netgear rbe373_firmwarev < 12.1.3.1112.1.3.11
netgear rbe374_firmwarev < 12.1.3.1112.1.3.11
netgear rbe770_firmwarev < 10.5.20.710.5.20.7
netgear rbe771_firmwarev < 10.5.20.710.5.20.7
netgear rbe772_firmwarev < 10.5.20.710.5.20.7
netgear rbe773_firmwarev < 10.5.20.710.5.20.7
netgear rbe970_firmwarev < 9.13.2.19.13.2.1
netgear rbe971_firmwarev < 9.13.2.19.13.2.1
netgear rbr750_firmwarev < 7.2.8.27.2.8.2
netgear rbr840_firmwarev < 7.2.8.27.2.8.2
netgear rbr850_firmwarev < 7.2.8.27.2.8.2
netgear rbr860_firmwarev < 7.2.8.27.2.8.2
netgear rbs750_firmwarev < 7.2.8.27.2.8.2
netgear rbs840_firmwarev < 7.2.8.27.2.8.2
netgear rbs850_firmwarev < 7.2.8.27.2.8.2
netgear rbs860_firmwarev < 7.2.8.27.2.8.2
netgear rbre950_firmwarev < 7.2.8.27.2.8.2
netgear rbre960_firmwarev < 7.2.8.27.2.8.2
netgear rbse950_firmwarev < 7.2.8.27.2.8.2
netgear rbse960_firmwarev < 7.2.8.27.2.8.2

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.