AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-0404

HIGH · CVSS 8 EPSS 1.06%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-01-13 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.0. See the original NVD description below for full technical details.

CVE
CVE-2026-0404
Severity
HIGH
CVSS
8
EPSS
1.06%

Original NVD Description

An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default.

Related CVEs

Other vulnerabilities affecting the same vendor(s)