Cyber Resilience

CVE-2026-3088

Memory Safety in Netgear Rbe970 Firmware ≤ 9.10.1.4

Published
09 June 2026
Modified
18 June 2026
Patch / advisory
CVSS Score v4 4.9
Click a component to see what it means
Raw vectorCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber
EPSS Score 0.0036 28th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-3088 is a medium-severity Out-of-bounds Write (CWE-787) vulnerability in Netgear Rbe970 Firmware. Its CVSS base score is 4.9 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 28th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and SI-10 (Information Input Validation) — see the control section below for these in your framework.

EU & UK References

No EU or UK CSIRT advisories indexed for this CVE.

Vulnerability Data

Unauthenticated users on the local network can cause the router to become unavailable by sending specially crafted requests.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

CWE-787 out-of-bounds write on router enables remote DoS via crafted requests, directly mapping to application/system exploitation for endpoint DoS.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2023-49007Same vendor: Netgear
CVE-2025-27598Shared CWE-787
CVE-2024-13168Shared CWE-787
CVE-2025-32402Shared CWE-787
CVE-2024-48241Shared CWE-787
CVE-2023-27368Same vendor: Netgear
CVE-2024-29131Shared CWE-787
CVE-2024-45382Shared CWE-787
CVE-2025-24139Shared CWE-787
CVE-2024-35949Shared CWE-787

Affected Assets

netgear
rbe970 firmware
≤ 9.10.1.4
netgear
rbe971 firmware
≤ 9.10.1.4
netgear
rbr860 firmware
≤ 7.2.7.15
netgear
rbre950 firmware
≤ 7.2.7.15
netgear
rbre960 firmware
≤ 7.2.7.15
netgear
rbs860 firmware
≤ 7.2.7.15
netgear
rbse950 firmware
≤ 7.2.7.15
netgear
rbse960 firmware
≤ 7.2.7.15

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • AC-3 Access Enforcement
  • SI-10 Information Input Validation
  • SC-7 Boundary Protection
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly blocks unauthenticated local-network users from sending any requests to the router management plane.

prevent

Requires rigorous validation of all request fields, preventing the out-of-bounds write (CWE-787) that crashes the device.

prevent

Boundary-protection mechanisms (e.g., management VLAN, source-address filtering) can restrict which local hosts may reach the vulnerable interface.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure-development practices (static analysis, bounds checking, code review) are the primary means of preventing out-of-bounds writes.

ID.RA-01 partial match
prevents

Vulnerability scanning and recording can discover out-of-bounds write flaws so they can be remediated.

PR.PS-02 partial match
prevents

Patching or replacing vulnerable software directly eliminates known instances of this coding weakness.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing in development and acceptance can detect and prevent out-of-bounds write defects.

prevents

Secure development life cycle mandates practices that prevent out-of-bounds writes.

prevents

Application security requirements can specify bounds-checking and safe memory handling.

prevents

Secure architecture and engineering principles reduce the likelihood of buffer overflows.

prevents

Secure coding directly addresses out-of-bounds writes through language choice and coding standards.

prevents

Change management can enforce review gates that catch unsafe memory operations before deployment.

References