CVE-2026-62655 Details
Description
A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.
A denial-of-service vulnerability has been identified in certain NETGEAR Orbi models, including the RBR860, RBRE950, RBRE960, and RBS860. This vulnerability could allow an unauthorized user to cause the device to become unresponsive or to restart unexpectedly, disrupting network connectivity and temporarily making the device unavailable.
Users can update to the latest firmware version 7.2.8.5, available for download from the NETGEAR Download Center. Instructions for updating the firmware can be found in the user manuals available on the NETGEAR support pages for each affected model.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 14, 2026CISA-ADP
Assessed Jul 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory | Netgear, Inc. | |
| https://www.netgear.com/support/product/rbr860/ | Netgear, Inc. | ProductVendor |
| https://www.netgear.com/support/product/rbre950/ | Netgear, Inc. | ProductVendor |
| https://www.netgear.com/support/product/rbre960/ | Netgear, Inc. | ProductVendor |
| https://www.netgear.com/support/product/rbs860/ | Netgear, Inc. | ProductVendor |
| https://www.netgear.com/support/product/rbse950/ | Netgear, Inc. | ProductVendor |
| https://www.netgear.com/support/product/rbse960/ | Netgear, Inc. | ProductVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-121 | Stack-based Buffer Overflow | Netgear, Inc. |
Affected Products
| Product | Versions |
|---|---|
| NETGEAR Orbi RBR860 | All versions |
CPE
Remediation
| |
| NETGEAR Orbi RBRE950 | All versions |
CPE
Remediation
| |
| NETGEAR Orbi RBRE960 | All versions |
CPE
Remediation
| |
| NETGEAR Orbi RBS860 | All versions |
CPE
Remediation
| |
| NETGEAR Orbi RBSE950 | All versions |
CPE
Remediation
| |
| NETGEAR Orbi RBSE960 | All versions |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | Netgear, Inc. |
| Jul 15, 2026 | CVE Modified | CISA-ADP |
| Jul 14, 2026 | New CVE Received | Netgear, Inc. |