# CVE-2026-0413: NETGEAR Multiple Router Models stack-based buffer overflow

Source: https://junglewise.ai/threats/cve-2026-0413-netgear-multiple-router-models-stack-based-buffer-overflow  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-09. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2026-0413 · Severity: info · CVSS 4.3 · Published 2026-06-09

A security vulnerability exists in several NETGEAR router models that could allow an authorized administrator to modify the device's core software. To exploit this, an attacker would already need administrative credentials and access to the local network. If successful, they could make unauthorized changes to how the router functions or alter its internal software.

Technologies: [NETGEAR RBR750](https://junglewise.ai/threats/technologies/rbr750), [NETGEAR RBR840](https://junglewise.ai/threats/technologies/rbr840), [NETGEAR RBR850](https://junglewise.ai/threats/technologies/rbr850), [NETGEAR RBR860](https://junglewise.ai/threats/technologies/rbr860), [NETGEAR RBRE950](https://junglewise.ai/threats/technologies/rbre950), [NETGEAR RBRE960](https://junglewise.ai/threats/technologies/rbre960), [NETGEAR RBS750](https://junglewise.ai/threats/technologies/rbs750), [NETGEAR RBS840](https://junglewise.ai/threats/technologies/rbs840), [NETGEAR RBS850](https://junglewise.ai/threats/technologies/rbs850), [NETGEAR RBS860](https://junglewise.ai/threats/technologies/rbs860), [NETGEAR RBSE950](https://junglewise.ai/threats/technologies/rbse950), [NETGEAR RBSE960](https://junglewise.ai/threats/technologies/rbse960). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear).

## Quick answers

**Is CVE-2026-0413 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-0413 being exploited in the wild.

**How severe is CVE-2026-0413?** Informational severity, with a CVSS score of 4.3, published 9 June 2026.

**Which products and versions are affected?** NETGEAR RBE372; NETGEAR RBE770; NETGEAR RBR750; NETGEAR RBR840; and 10 more.

**Is there a fix for CVE-2026-0413?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-0413 attacked?** It is attacked from the adjacent network, in device firmware.

**Am I affected by CVE-2026-0413?** Check whether you run NETGEAR RBE372, NETGEAR RBE770, NETGEAR RBR750 or one of the others listed. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in multiple NETGEAR router models due to insufficient input validation of buffers. The vulnerability is accessible to authenticated administrators connected via the local network (adjacent attack vector). An attacker with high privileges can exploit this flaw to achieve unauthorized modification of the router's firmware or software functionality. The CVSS 4.0 score is 4.3, reflecting that while the impact on integrity is high, it requires significant prior authentication and local network proximity.

## Affected products

- NETGEAR RBE372
- NETGEAR RBE770
- NETGEAR RBR750
- NETGEAR RBR840
- NETGEAR RBR850
- NETGEAR RBR860
- NETGEAR RBRE950
- NETGEAR RBRE960
- NETGEAR RBS750
- NETGEAR RBS840
- NETGEAR RBS850
- NETGEAR RBS860
- NETGEAR RBSE950
- NETGEAR RBSE960

## Timeline

- 2026-06-09: disclosed
- 2026-06-09: advisory

## References

- [https://www.netgear.com/support/product/rbe372/](https://www.netgear.com/support/product/rbe372/)
- [https://www.netgear.com/support/product/rbe770/](https://www.netgear.com/support/product/rbe770/)
- [https://www.netgear.com/support/product/rbr750/](https://www.netgear.com/support/product/rbr750/)
- [https://www.netgear.com/support/product/rbr840/](https://www.netgear.com/support/product/rbr840/)
- [https://www.netgear.com/support/product/rbr850/](https://www.netgear.com/support/product/rbr850/)
- [https://www.netgear.com/support/product/rbr860/](https://www.netgear.com/support/product/rbr860/)
- [https://www.netgear.com/support/product/rbre950/](https://www.netgear.com/support/product/rbre950/)

## Related threats

- [NETGEAR Orbi stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-62655-netgear-orbi-stack-based-buffer-overflow)
- [Netgear Orbi Routers out-of-bounds write denial of service](https://junglewise.ai/threats/cve-2026-3088-netgear-orbi-routers-out-of-bounds-write-denial-of-service)
- [NETGEAR Multiple Router Models insufficient input validation](https://junglewise.ai/threats/cve-2026-0415-netgear-multiple-router-models-insufficient-input-validation)