CVE-2026-0414: NETGEAR RBE970 Firmware

Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and functionality.

Affected products

• NETGEAR RBE970 Firmware: before 9.12.4.9 (fixed in 9.12.4.9)

Published 2026-06-09. Last modified 2026-07-23.