CVE-2020-26907

—

CVSS 3.1

8.8 high

EPSS

2%p73

Published

Oct 9, 2020 (Oct 9, 2020)

Modified

Jun 17, 2026

Description

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.16.6, RBR850 before 3.2.16.6, and RBS850 before 3.2.16.6.

Vendors: netgear
Products: rbk852 firmware, rbr850 firmware, rbs850 firmware
Weakness: CWE-77
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.