Skip to content
Fencer Vulns
medium 4.5

CVE-2026-0413 json

Buffer overflow vulnerability in certain NETGEAR Nighthawk routers

published 2026-06-09 5 mo ago modified 2026-07-23 3 mo ago also EUVD-2026-35462

cvss
4.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 25%
public exploits
0
none known

Summary

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Patch / fix

  • NETGEAR RBE370 V12.1.2.1
  • NETGEAR RBE770 V10.5.20.10
  • NETGEAR RBR750 V7.2.8.5
  • NETGEAR RBR840 V7.2.8.5
  • NETGEAR RBR850 V7.2.8.5
  • NETGEAR RBR860 V7.2.8.5
  • NETGEAR RBRE950 V7.2.8.5
  • NETGEAR RBRE960 V7.2.8.5
  • NETGEAR RBS750 V7.2.8.5
  • NETGEAR RBS840 V7.2.8.5
  • NETGEAR RBS850 V7.2.8.5
  • NETGEAR RBS860 V7.2.8.5
  • NETGEAR RBSE950 V7.2.8.5
  • NETGEAR RBSE960 V7.2.8.5

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
5 mo ago

Exploit prediction

0.32% chance of exploitation in the next 30 days, higher than 25% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 4.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
CNA 4.0 4.3 CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD 3.1 4.5 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Affected products

  • NETGEAR RBE370
  • NETGEAR RBE770
  • NETGEAR RBR750
  • NETGEAR RBR840
  • NETGEAR RBR850
  • NETGEAR RBR860
  • NETGEAR RBRE950
  • NETGEAR RBRE960
  • NETGEAR RBS750
  • NETGEAR RBS840
  • NETGEAR RBS850
  • NETGEAR RBS860
  • NETGEAR RBSE950
  • NETGEAR RBSE960

Classification

Weakness
  • CWE-121 Stack-based Buffer Overflow

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.