CVE-2026-0413: Buffer overflow vulnerability in certain NETGEAR Nighthawk routers

Published Jun 9, 2026

Updated

A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected Software

1 affected component

Netgear NETGEAR Nighthawk

Remediation

Information

Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in: ProductFixed VersionRBE370 Orbi Dual-band Mesh WiFi 7 Add-on Satellite V12.1.2.1 https://www.netgear.com/support/product/rbe370/ RBE770 Orbi Tri-band Mesh WiFi 7 Add-on Satellite V10.5.20.10 https://www.netgear.com/support/product/rbe770/ RBR750 Orbi WiFi 6 Router AX4200 V7.2.8.5 https://www.netgear.com/support/product/rbr750/ RBR840 (EoS) Orbi WiFi 6 System AX5700 V7.2.8.5 https://www.netgear.com/support/product/rbr840/ RBR850 Orbi WiFi 6 Router AX6000 V7.2.8.5 https://www.netgear.com/support/product/rbr850/ RBR860 Orbi Tri-band Mesh WiFi 6 Router – 860 Series V7.2.8.5 https://www.netgear.com/support/product/rbr860/ RBRE950 Orbi Quad-band Mesh WiFi 6E Router V7.2.8.5 https://www.netgear.com/support/product/rbre950/ RBRE960 Orbi Quad-band Mesh WiFi 6E Router V7.2.8.5 https://www.netgear.com/support/product/rbre960/ RBS750 Orbi WiFi 6 Add-on Satellite AX4200 V7.2.8.5 https://www.netgear.com/support/product/rbs750/ RBS840 (EoS) Orbi WiFi 6 Add-on Satellite AX5700 V7.2.8.5 https://www.netgear.com/support/product/rbs840/ RBS850 Orbi WiFi 6 Satellite AX6000 V7.2.8.5 https://www.netgear.com/support/product/rbs850/ RBS860 Orbi Tri-band Mesh WiFi 6 Add-on Satellite – 860 Series V7.2.8.5 https://www.netgear.com/support/product/rbs860/ RBSE950 Orbi Quad-band Mesh WiFi 6E Add-on Satellite V7.2.8.5 https://www.netgear.com/support/product/rbse950/ RBSE960 Orbi Quad-band Mesh WiFi 6E Add-on Satellite V7.2.8.5 https://www.netgear.com/support/product/rbse960/ Models marked (EoS) have reached End-of-Support phase, and no security updates are planned. NETGEAR strongly recommends that you retire these devices and upgrade to a newer NETGEAR device for continued security support.

Event History

Jun 9, 2026

CVE Published

via MITRE·03:50 PM

Data Sourced

via MITRE·03:50 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-0413?

The severity of CVE-2026-0413 is medium with a CVSS score of 4.3.

How do I fix CVE-2026-0413?

To fix CVE-2026-0413, check your NETGEAR Nighthawk router for the latest firmware update and apply it if not automatically updated.

What type of vulnerability is CVE-2026-0413?

CVE-2026-0413 is a buffer overflow vulnerability caused by insufficient input validation.

Who is affected by CVE-2026-0413?

Authenticated administrators connected to the local network of certain NETGEAR Nighthawk routers are affected by CVE-2026-0413.

What can attackers do with CVE-2026-0413?

Attackers exploiting CVE-2026-0413 can make unauthorized modifications to router software and functionality.