CVE-2026-3088 | THREATINT

Description

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

PUBLISHED Reserved 2026-02-24 | Published 2026-06-09 | Updated 2026-06-10 | Assigner NETGEAR

MEDIUM: 4.9CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber

Problem types

CWE-787 Out-of-bounds write

Product status

Default status

unaffected

V6.3.7.10 (custom) before V7.2.7.15

affected

Default status

unaffected

Any version before v7.2.7.15

affected

Default status

unaffected

V6.3.7.10 (custom) before V7.2.7.15

affected

Default status

unaffected

V6.3.7.10 (custom) before V9.10.1.4

affected

Default status

unaffected

V6.3.7.10 (custom) before V9.10.1.4

affected

Default status

unaffected

Any version before V7.2.7.15

affected

Default status

unaffected

Any version before v7.2.7.15

affected

Default status

unaffected

Any version before V7.2.7.15

affected

Credits

fxc233 finder

References

www.netgear.com/support/product/rbr860/ product patch

www.netgear.com/support/product/rbre950/ product patch

www.netgear.com/support/product/rbre960/ product patch

www.netgear.com/support/product/rbs860/ product patch

www.netgear.com/support/product/rbse960/ product patch

www.netgear.com/support/product/rbse950/ product patch

kb.netgear.com/000070811/June-2026-NETGEAR-Security-Advisory vendor-advisory

cve.org (CVE-2026-3088)

nvd.nist.gov (CVE-2026-3088)

Download JSON