VULNERABILITY INTELLIGENCE
CVE-2026-0403
CVSS score1.1 LOW
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/AU:N/R:U/V:D/RE:M/U:Amber
Description
An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Vendor Advisory
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product
- a2826606-91e7-4eb6-899e-8484bd4575d5 — Patch, Product