Denial of Service Risk in NETGEAR Routers Impacting Local Network Users
CVE-2026-3088

4.9MEDIUM

Key Information:

Vendor

Netgear
Status
Rbr860
Rbre950
Rbre960
Rbe970
Vendor
CVE Published:
9 June 2026

What is CVE-2026-3088?

A vulnerability in NETGEAR routers allows unauthenticated users on the local network to send specially crafted requests, leading to the potential unavailability of the router. This poses a significant risk as it can disrupt network services, affecting all users connected to the router. It is crucial for users of the affected router models to apply the available patches to protect their network environments.

Affected Version(s)

RBE970 V6.3.7.10

RBE971 V6.3.7.10

RBR860 V6.3.7.10

References

https://www.netgear.com/support/product/rbr860/
productpatch
https://www.netgear.com/support/product/rbre950/
productpatch
https://www.netgear.com/support/product/rbre960/
productpatch

CVSS V4

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

fxc233
.