CVE-2026-0405 Authentication Bypass in NETGEAR Orbi Devices

Medium 6.1 Published 13 Jan 2026 Updated 26 Feb 2026

Local network users can bypass authentication to access the NETGEAR Orbi router web interface with administrative privileges.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-0405?

CVE-2026-0405 is a medium-severity authentication bypass vulnerability in Netgear Rbr750 Firmware, published on 13 Jan 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

Weakness: CWE-287

Which versions are affected by CVE-2026-0405?

It affects 25 products.

Products include Netgear Cbr750 Firmware, Netgear Nbr750 Firmware, Netgear Rbe370 Firmware, Netgear Rbe371 Firmware, Netgear Rbe372 Firmware, Netgear Rbe373 Firmware and 19 more.

How do I fix CVE-2026-0405?

No fix has been published for CVE-2026-0405 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2026-0405 being exploited?

There is no known exploitation of CVE-2026-0405 in the wild and no public exploit code.

All Netgear Rbr750 Firmware vulnerabilities

Sources

Also known as GHSA-2cqm-696m-6jx3.