CVE-2026-0411 describes an information disclosure vulnerability in NETGEAR Orbi satellite devices (RBE97x series). This flaw could enable a network-connected user to obtain administrator access to the Orbi router by exploiting sensitive information exposure. The vulnerability specifically affects Orbi systems with satellites; standalone Orbi WiFi Systems without satellites are not impacted. The CVSS 4.2 score indicates a medium severity with attack vector being adjacent network and requiring low attack complexity and low privileges. No vendor advisory or patch information is currently available to confirm remediation status.

An attacker connected to the local network via an Orbi satellite device could gain unauthorized administrator access to the Orbi router. This could lead to control over router configuration and potentially compromise network security. However, the vulnerability does not affect Orbi systems without satellites, limiting the scope of impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been published by NETGEAR at this time.