CVE-2026-0405

High · 7.8

CVSS

7.8

EPSS

0.4%

Published

Jan 13, 2026

CISA due date

—

The record

An authentication bypass vulnerability in NETGEAR Orbi devices allows users connected to the local network to access the router web interface as an admin.

Affected packages

Ecosystem	Package	Introduced	Fixed