Skip to content
Fencer Vulns
medium 5.7

CVE-2026-62655 json

A DoS vulnerability due to stack overflow exists in certain NETGEAR Orbi models

published 2026-07-14 3 mo ago modified 2026-07-15 3 mo ago also EUVD-2026-44327

cvss
5.7
version 4.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.3%
EPSS 0.3% chance of exploitation in 30 days, percentile 25%
public exploits
0
none known

Summary

A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.

Patch / fix

  • NETGEAR RBR860 V7.2.7.15
  • NETGEAR RBRE950 v7.2.7.15
  • NETGEAR RBRE960 V7.2.7.15
  • NETGEAR RBE970 V9.10.1.4
  • NETGEAR RBE971 V9.10.1.4
  • NETGEAR RBS860 V7.2.7.15
  • NETGEAR RBSE950 v7.2.7.15
  • NETGEAR RBSE960 V7.2.7.15

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
3 mo ago

Exploit prediction

0.33% chance of exploitation in the next 30 days, higher than 25% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 4.0 5.7 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P
CNA 4.0 5.7 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affected products

  • NETGEAR RBR860
  • NETGEAR RBRE950
  • NETGEAR RBRE960
  • NETGEAR RBE970
  • NETGEAR RBE971
  • NETGEAR RBS860
  • NETGEAR RBSE950
  • NETGEAR RBSE960

Classification

Weakness
  • CWE-121 Stack-based Buffer Overflow

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.