CVE-2026-0413
Buffer overflow vulnerability in certain NETGEAR Nighthawk routers
CVE-2026-0413 is a medium vulnerability (CVSS 4.3) in Netgear Rbe370, published June 9, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. No source names a fixed version.
- Severity
- 4.3 MediumCVSS 4.0, CVE List
- Exploit chance
- 0.32%EPSS, 25th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
Affected products
- netgear rbe370
- netgear rbe370 firmware
- netgear rbe770
- netgear rbe770 firmware
- netgear rbr750
- netgear rbr750 firmware
- netgear rbr840
- netgear rbr840 firmware
- netgear rbr850
- netgear rbr850 firmware
- netgear rbr860
- netgear rbr860 firmware
Show 16 moreShow less
- netgear rbre950
- netgear rbre950 firmware
- netgear rbre960
- netgear rbre960 firmware
- netgear rbs750
- netgear rbs750 firmware
- netgear rbs840
- netgear rbs840 firmware
- netgear rbs850
- netgear rbs850 firmware
- netgear rbs860
- netgear rbs860 firmware
- netgear rbse950
- netgear rbse950 firmware
- netgear rbse960
- netgear rbse960 firmware
What each source reports
CVE List Score used
Buffer overflow vulnerability in certain NETGEAR Nighthawk routers
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
- Record
CVE-2026-0413- CVSS 4.0
- 4.3 Medium
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2026-35462
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
- Record
EUVD-2026-35462- CVSS 4.0
- 4.3 Medium
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-5vq9-cj6j-3h3r
Insufficient input validation of buffers vulnerability in the listed NETGEAR models allows...
Insufficient input validation of buffers vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
- Record
GHSA-5vq9-cj6j-3h3r- CVSS 4.0
- 4.3 Medium
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.5 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-121
- Updated
- 2026-11-02
NVD
A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.
- Record
CVE-2026-0413- CVSS 4.0
- 4.3 Medium
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - CVSS 3.1
- 4.5 Medium
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-121
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
netgear.com/support/product/rbe770
Show 11 moreShow less
kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory
nvd.nist.gov/vuln/detail/CVE-2026-0413
github.com/advisories/GHSA-5vq9-cj6j-3h3r