CVE-2026-3088: NETGEAR RBE970 Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

Affected products

• NETGEAR RBE970 Firmware: before 9.10.1.4 (fixed in 9.10.1.4)
• NETGEAR RBE971 Firmware: before 9.10.1.4 (fixed in 9.10.1.4)
• NETGEAR RBR860 Firmware: before 7.2.7.15 (fixed in 7.2.7.15)
• NETGEAR RBRE950 Firmware: before 7.2.7.15 (fixed in 7.2.7.15)
• NETGEAR RBRE960 Firmware: before 7.2.7.15 (fixed in 7.2.7.15)
• NETGEAR RBS860 Firmware: before 7.2.7.15 (fixed in 7.2.7.15)
• NETGEAR RBSE950 Firmware: before 7.2.7.15 (fixed in 7.2.7.15)
• NETGEAR RBSE960 Firmware: before 7.2.7.15 (fixed in 7.2.7.15)

Published 2026-06-09. Last modified 2026-07-23.