CVE-2026-3088
4.9 mediumEPSS 0.4%
Medium (4.9) in netgear. EPSS 0.4% chance of exploitation in the next 30 days.
Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.
Severity
CVSS 4.0
4.9 mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:AmberCVSS 3.1
6.5 mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netgear:rbe970_firmware
- netgear:rbe971_firmware
- netgear:rbr860_firmware
- netgear:rbre950_firmware
- netgear:rbre960_firmware
- netgear:rbs860_firmware
- netgear:rbse950_firmware
- netgear:rbse960_firmware
References
Check your stackJSON