CVE-2026-0411: A Sensitive Information Disclosure Vulnerability in NETGEAR Orbi Satellites

Severity: high (CVSS 8.0 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-09 · updated 2026-07-23
Weakness: CWE-200

Description

An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.

Affected products

NETGEAR RBE970: before 9.13.2.1 — fixed in 9.13.2.1
NETGEAR Rbr350 Firmware: before 4.4.2.2 — fixed in 4.4.2.2
NETGEAR Rbr760 Firmware: before 6.3.8.11 — fixed in 6.3.8.11
NETGEAR Rbs350 Firmware: before 4.4.2.2 — fixed in 4.4.2.2
NETGEAR Rbs760 Firmware: before 6.3.8.11 — fixed in 6.3.8.11

How to fix

Upgrade to a fixed version: NETGEAR RBE970 9.13.2.1; NETGEAR Rbr350 Firmware 4.4.2.2; NETGEAR Rbr760 Firmware 6.3.8.11; NETGEAR Rbs350 Firmware 4.4.2.2; NETGEAR Rbs760 Firmware 6.3.8.11. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-0411 or the next vulnerability affects your stack