NETGEAR RBRE960 Firmware vulnerabilities

8 CVEs affecting NETGEAR RBRE960 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-3088, published 2026-06-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-0404, published 2026-01-13. High severity, CVSS 8.0. EPSS: 1.1% chance of exploitation in the next 30 days. An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on…
CVE-2021-45515, published 2021-12-26. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Certain NETGEAR devices are affected by denial of service. This affects EX7500 before 1.0.0.72, RBS40V before 2.6.1.4, RBW30 before 2.6.1.4, RBRE960 before 6.0.3.68, RBSE960 before 6.0.3.68, RBR750…
CVE-2026-3088, published 2026-06-09. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
CVE-2026-0405, published 2026-01-13. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.
CVE-2026-0403, published 2026-01-13. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. An insufficient input validation vulnerability in NETGEAR Orbi routers allows attackers connected to the router's LAN to execute OS command injections.
CVE-2026-0413, published 2026-06-09. Medium severity, CVSS 4.5. EPSS: 0.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability due to insufficient input validation in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification…
CVE-2026-0418, published 2026-06-09. Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient configuration management in the listed devices allows authenticated administrators connected to the local network to tamper with the system.
CVE-2026-0415, published 2026-06-09. Medium severity, CVSS 4.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification of router software and…