Is CVE-2026-0411 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-0411 being exploited in the wild.

How severe is CVE-2026-0411?

Informational severity, with a CVSS score of 4.2, published 9 June 2026.

Which products and versions are affected?

NETGEAR Orbi RBE970; NETGEAR Orbi RBR350; NETGEAR Orbi RBR760; NETGEAR Orbi RBS350; and 1 more.

Is there a fix for CVE-2026-0411?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-0411 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2026-0411?

Check whether you run NETGEAR Orbi RBE970, NETGEAR Orbi RBR350, NETGEAR Orbi RBR760 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-0411: NETGEAR Orbi information disclosure in satellite devices

CVE-2026-0411 · Severity: info · CVSS 4.2 · Published 2026-06-09

A security flaw in NETGEAR Orbi mesh WiFi systems could allow a person already connected to your home or office network to gain full administrative control over the router. This vulnerability specifically affects systems using satellite extenders; standalone Orbi routers are not impacted. An attacker with this level of access could change network settings, monitor traffic, or disrupt internet connectivity.

Vendors: NETGEAR.

Quick answers

Is CVE-2026-0411 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-0411 being exploited in the wild.
How severe is CVE-2026-0411?: Informational severity, with a CVSS score of 4.2, published 9 June 2026.
Which products and versions are affected?: NETGEAR Orbi RBE970; NETGEAR Orbi RBR350; NETGEAR Orbi RBR760; NETGEAR Orbi RBS350; and 1 more.
Is there a fix for CVE-2026-0411?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-0411 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2026-0411?: Check whether you run NETGEAR Orbi RBE970, NETGEAR Orbi RBR350, NETGEAR Orbi RBR760 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An information disclosure vulnerability (CWE-200) exists in the communication or configuration handling of NETGEAR Orbi satellite devices. An attacker with low-privileged access to the adjacent network (WiFi or Ethernet) can exploit this flaw to retrieve sensitive information that facilitates full administrative access to the primary Orbi router. The issue is specific to mesh configurations involving satellite units; standalone Orbi WiFi systems are not affected. The vulnerability has been assigned a CVSS 4.0 score of 4.2 by the vendor, reflecting that while the impact on confidentiality and subsequent system integrity is high, it requires prior network access.

Affected products

NETGEAR Orbi RBE970
NETGEAR Orbi RBR350
NETGEAR Orbi RBR760
NETGEAR Orbi RBS350
NETGEAR Orbi RBS760

Timeline

2026-06-09: disclosed: Initial publication of CVE-2026-0411
2026-06-09: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.