CVE-2026-3088 - Vulnerability Details - OpenCVE

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products

References

Link	Providers
https://www.netgear.com/support/product/rbr860/
https://www.netgear.com/support/product/rbre950/
https://www.netgear.com/support/product/rbre960/
https://www.netgear.com/support/product/rbs860/
https://www.netgear.com/support/product/rbse950/
https://www.netgear.com/support/product/rbse960/

History

Tue, 09 Jun 2026 16:30:00 +0000

Type	Values Removed	Values Added
Description		Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
Title		Unauthenticated users can disrupt router operation
Weaknesses		CWE-787
References		https://www.netgear.com/support/product/rbr860/ https://www.netgear.com/support/product/rbre950/ https://www.netgear.com/support/product/rbre960/ https://www.netgear.com/support/product/rbs860/ https://www.netgear.com/support/product/rbse950/ https://www.netgear.com/support/product/rbse960/
Metrics		cvssV4_0 `{'score': 4.9, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber'}`

MITRE

Status: PUBLISHED

Assigner: NETGEAR

Published: 2026-06-09T15:50:47.289Z

Updated: 2026-06-09T15:50:47.289Z

Reserved: 2026-02-24T00:11:29.678Z

Link: CVE-2026-3088

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-06-09T17:17:05.800

Modified: 2026-06-09T17:17:05.800

Link: CVE-2026-3088

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-06-09T17:30:10Z

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-3088", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2026-02-24T00:11:29.678Z", "datePublished": "2026-06-09T15:50:47.289Z", "dateUpdated": "2026-06-09T15:50:47.289Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-06-09T15:50:47.289Z"}, "title": "Unauthenticated users can disrupt router operation", "datePublic": "2026-06-09T00:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-787", "description": "CWE-787 Out-of-bounds write", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-100", "descriptions": [{"lang": "en", "value": "CAPEC-100 Overflow Buffers"}]}], "affected": [{"vendor": "NETGEAR", "product": "RBR860", "versions": [{"status": "affected", "version": "V6.3.7.10", "lessThan": "V7.2.7.15", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBRE950", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.7.15", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBRE960", "versions": [{"status": "affected", "version": "V6.3.7.10", "lessThan": "V7.2.7.15", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBRE970", "versions": [{"status": "affected", "version": "V6.3.7.10", "lessThan": "V9.10.1.4", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBRE971", "versions": [{"status": "affected", "version": "V6.3.7.10", "lessThan": "V9.10.1.4", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS860", "versions": [{"status": "affected", "version": "0", "lessThan": "V7.2.7.15", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBSE950", "versions": [{"status": "affected", "version": "0", "lessThan": "v7.2.7.15", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBSE960", "versions": [{"status": "affected", "version": "0", "lessThan": "V7.2.7.15", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<div>Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.</div>"}]}], "references": [{"url": "https://www.netgear.com/support/product/rbr860/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbre950/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbre960/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs860/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbse960/", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbse950/", "tags": ["product", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 4.9, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber"}}], "solutions": [{"lang": "en", "value": "NETGEAR strongly recommends that you install the latest firmware as soon as possible.\n\n\n\nIssue fixed in:\n\nProductFixed VersionRBR860 V7.2.7.15 https://www.netgear.com/support/product/rbr860/ RBRE950 v7.2.7.15 https://www.netgear.com/support/product/rbre950/ RBRE960 V7.2.7.15 https://www.netgear.com/support/product/rbre960/ RBRE970\u00a0V9.10.1.4RBRE971\u00a0V9.10.1.4RBS860 V7.2.7.15 https://www.netgear.com/support/product/rbs860/ RBSE950 v7.2.7.15 https://www.netgear.com/support/product/rbse950/ RBSE960 V7.2.7.15 https://www.netgear.com/support/product/rbse960/", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>NETGEAR strongly recommends that you install the latest firmware as soon as possible.</p><p>Issue fixed in:</p><table><thead><tr><th>Product</th><th>Fixed Version</th></tr></thead><tbody><tr><td>RBR860</td><td><a href=\"https://www.netgear.com/support/product/rbr860/\">V7.2.7.15</a></td></tr><tr><td>RBRE950</td><td><a href=\"https://www.netgear.com/support/product/rbre950/\">v7.2.7.15</a></td></tr><tr><td>RBRE960</td><td><a href=\"https://www.netgear.com/support/product/rbre960/\">V7.2.7.15</a></td></tr><tr><td>RBRE970</td><td> V9.10.1.4</td></tr><tr><td>RBRE971</td><td> V9.10.1.4</td></tr><tr><td>RBS860</td><td><a href=\"https://www.netgear.com/support/product/rbs860/\">V7.2.7.15</a></td></tr><tr><td>RBSE950</td><td><a href=\"https://www.netgear.com/support/product/rbse950/\">v7.2.7.15</a></td></tr><tr><td>RBSE960</td><td><a href=\"https://www.netgear.com/support/product/rbse960/\">V7.2.7.15</a></td></tr></tbody></table>"}]}], "credits": [{"lang": "en", "value": "fxc233", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.3"}}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests."}], "id": "CVE-2026-3088", "lastModified": "2026-06-09T17:17:05.800", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 4.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "LOW"}, "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}]}, "published": "2026-06-09T17:17:05.800", "references": [{"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "url": "https://www.netgear.com/support/product/rbr860/"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "url": "https://www.netgear.com/support/product/rbre950/"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "url": "https://www.netgear.com/support/product/rbre960/"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "url": "https://www.netgear.com/support/product/rbs860/"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "url": "https://www.netgear.com/support/product/rbse950/"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "url": "https://www.netgear.com/support/product/rbse960/"}], "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}]}