# CVE-2026-62655: NETGEAR Orbi stack-based buffer overflow

Source: https://junglewise.ai/threats/cve-2026-62655-netgear-orbi-stack-based-buffer-overflow  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-14. Updated: 2026-07-14  
License: CC BY 4.0 with a link back

CVE-2026-62655 · Severity: info · CVSS 5.7 · Published 2026-07-14

A security vulnerability has been identified in several NETGEAR Orbi WiFi router and satellite models. An attacker could exploit this flaw to cause the device to crash or restart unexpectedly, leading to a loss of internet connectivity for all connected users. This disruption can impact business operations and remote work by making the local network temporarily unavailable.

Technologies: [NETGEAR RBE970](https://junglewise.ai/threats/technologies/rbe970), [NETGEAR RBR860](https://junglewise.ai/threats/technologies/rbr860), [NETGEAR RBRE950](https://junglewise.ai/threats/technologies/rbre950), [NETGEAR RBRE960](https://junglewise.ai/threats/technologies/rbre960), [NETGEAR RBS860](https://junglewise.ai/threats/technologies/rbs860), [NETGEAR RBSE950](https://junglewise.ai/threats/technologies/rbse950), [NETGEAR RBSE960](https://junglewise.ai/threats/technologies/rbse960). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear).

## Quick answers

**Is CVE-2026-62655 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-62655 being exploited in the wild.

**How severe is CVE-2026-62655?** Informational severity, with a CVSS score of 5.7, published 14 July 2026.

**Which products and versions are affected?** NETGEAR RBE970 < V9.10.1.4; NETGEAR Rbe971 < V9.10.1.4; NETGEAR RBR860 < V7.2.7.15; NETGEAR RBRE950 < v7.2.7.15; and 4 more.

**Is there a fix for CVE-2026-62655?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-62655 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-62655?** Check whether you run NETGEAR RBE970, NETGEAR Rbe971, NETGEAR RBR860 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in multiple NETGEAR Orbi models, including the RBR and RBS series. The vulnerability allows an unauthenticated attacker with adjacent network access to trigger a denial-of-service (DoS) condition, causing the device to hang or reboot. According to the CVSS 4.0 vector, the attack requires no special privileges or user interaction. NETGEAR has released firmware updates (V7.2.7.15 and V9.10.1.4 depending on the model) to address this issue.

## Affected products

- NETGEAR RBR860 < V7.2.7.15
- NETGEAR RBRE950 < v7.2.7.15
- NETGEAR RBRE960 < V7.2.7.15
- NETGEAR RBE970 < V9.10.1.4
- NETGEAR RBE971 < V9.10.1.4
- NETGEAR RBS860 < V7.2.7.15
- NETGEAR RBSE950 < v7.2.7.15
- NETGEAR RBSE960 < V7.2.7.15

## Timeline

- 2026-07-14: disclosed
- 2026-07-14: advisory

## References

- [https://www.netgear.com/support/product/rbr860/](https://www.netgear.com/support/product/rbr860/)
- [https://www.netgear.com/support/product/rbre950/](https://www.netgear.com/support/product/rbre950/)
- [https://www.netgear.com/support/product/rbre960/](https://www.netgear.com/support/product/rbre960/)
- [https://www.netgear.com/support/product/rbs860/](https://www.netgear.com/support/product/rbs860/)
- [https://www.netgear.com/support/product/rbse950/](https://www.netgear.com/support/product/rbse950/)
- [https://www.netgear.com/support/product/rbse960/](https://www.netgear.com/support/product/rbse960/)

## Related threats

- [Netgear Orbi Routers out-of-bounds write denial of service](https://junglewise.ai/threats/cve-2026-3088-netgear-orbi-routers-out-of-bounds-write-denial-of-service)
- [NETGEAR Multiple Router Models insufficient input validation](https://junglewise.ai/threats/cve-2026-0415-netgear-multiple-router-models-insufficient-input-validation)
- [NETGEAR RBE970 code injection via insufficient input validation](https://junglewise.ai/threats/cve-2026-0414-netgear-rbe970-code-injection-via-insufficient-input-validation)
- [NETGEAR Multiple Router Models stack-based buffer overflow](https://junglewise.ai/threats/cve-2026-0413-netgear-multiple-router-models-stack-based-buffer-overflow)