CVE-2026-0409
Netgear Orbi 370 Series Remote Code Execution vulnerability
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 4.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
09 jun 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A NETGEAR security issue that could allow an attacker with ability to intercept and tamper with traffic between the router and the Internet to run commands on your device when the device administrator performs certain specific management actions. This issue affects NETGEAR Orbi 370 series devices before V12.1.2.7.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Productos afectados
NETGEAR · Orbi 370¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →