CVE-2026-0411: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in NETGEAR RBE970
An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-0411) involves exposure of sensitive information (CWE-200) in NETGEAR Orbi satellite devices, specifically models in the RBR, RBE, and RBS series. A user connected to the affected network could exploit this flaw to gain administrator access to the Orbi router. The issue does not impact Orbi WiFi systems that do not use satellite devices. No patch or official remediation has been published by NETGEAR as of the provided data.
Potential Impact
An attacker with network access to the affected Orbi satellite devices could gain unauthorized administrator access to the Orbi router, potentially compromising the device's configuration and network security. The vulnerability is rated medium severity with a CVSS score of 4.2, indicating a moderate risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor NETGEAR advisories for updates. In the meantime, restricting network access to trusted users and devices may reduce exposure.
CVE-2026-0411: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor in NETGEAR RBE970
Description
An information disclosure vulnerability in the NETGEAR Orbi satellites (RBR/RBE/RBS Series) could allow a user connected to your network to gain administrator access to the Orbi router. The listed NETGEAR models are affected by this vulnerability. Orbi WiFi Systems without satellite devices are not impacted by this issue.
CVSS v4.0
Score 4.2medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-0411) involves exposure of sensitive information (CWE-200) in NETGEAR Orbi satellite devices, specifically models in the RBR, RBE, and RBS series. A user connected to the affected network could exploit this flaw to gain administrator access to the Orbi router. The issue does not impact Orbi WiFi systems that do not use satellite devices. No patch or official remediation has been published by NETGEAR as of the provided data.
Potential Impact
An attacker with network access to the affected Orbi satellite devices could gain unauthorized administrator access to the Orbi router, potentially compromising the device's configuration and network security. The vulnerability is rated medium severity with a CVSS score of 4.2, indicating a moderate risk.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor NETGEAR advisories for updates. In the meantime, restricting network access to trusted users and devices may reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- NETGEAR
- Date Reserved
- 2025-12-03T04:16:18.239Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a283e948dd33fbd8553f0f0
Added to database: 06/09/2026, 16:25:56 UTC
Last enriched: 06/17/2026, 08:39:51 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 66
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.