{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-123178", "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "state": "PUBLISHED", "assignerShortName": "NETGEAR", "dateReserved": "2026-11-05T16:47:22.240Z", "datePublished": "2026-11-10T16:03:17.333Z", "dateUpdated": "2026-11-10T16:03:17.333Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5", "shortName": "NETGEAR", "dateUpdated": "2026-11-10T16:03:17.333Z"}, "title": "Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350", "datePublic": "2026-11-10T16:00:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-20", "description": "CWE-20 Improper input validation", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "affected": [{"vendor": "NETGEAR", "product": "RBR350", "versions": [{"status": "affected", "version": "0", "lessThan": "v4.4.3.4", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "NETGEAR", "product": "RBS350", "versions": [{"status": "affected", "version": "0", "lessThan": "v4.4.3.4", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An insufficient input validation vulnerability\u00a0in the listed NETGEAR Orbi Models\u00a0router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router\u2019s software and functionality, potentially compromising the integrity of the affected device.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An insufficient input validation vulnerability&nbsp;<span>in the listed NETGEAR Orbi Models</span>&nbsp;router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router\u2019s software and functionality, potentially compromising the integrity of the affected device.</p>"}]}], "references": [{"url": "https://www.netgear.com/support/product/rbr350", "tags": ["product", "patch"]}, {"url": "https://www.netgear.com/support/product/rbs350", "tags": ["product", "patch"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "UNREPORTED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "DIFFUSE", "vulnerabilityResponseEffort": "LOW", "providerUrgency": "AMBER", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber"}}, {"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.5, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"}}], "solutions": [{"lang": "en", "value": "Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionRBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router v4.4.3.4 https://www.netgear.com/support/product/rbr350 RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite v4.4.3.4 https://www.netgear.com/support/product/rbs350", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:</p><table style=\"border-collapse:collapse;\"><thead><tr><th style=\"border:1px solid gray;padding:4px 8px;text-align:left;\">Product</th><th style=\"border:1px solid gray;padding:4px 8px;text-align:left;\">Fixed Version</th></tr></thead><tbody><tr><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><b>RBR350</b> Orbi AX1800 WiFi 6 Dual-band Mesh Router</td><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><a href=\"https://www.netgear.com/support/product/rbr350\">v4.4.3.4</a></td></tr><tr><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><b>RBS350</b> Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite</td><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><a href=\"https://www.netgear.com/support/product/rbs350\">v4.4.3.4</a></td></tr></tbody></table>"}]}], "credits": [{"lang": "en", "value": "Lei Gu,Shanquan Yang,Boyu Kuang,Anmin Fu,Nanjing University of Science and Technology", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "RBR350", "vendor": "NETGEAR", "versions": [{"lessThan": "v4.4.3.4", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "RBS350", "vendor": "NETGEAR", "versions": [{"lessThan": "v4.4.3.4", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An insufficient input validation vulnerability\u00a0in the listed NETGEAR Orbi Models\u00a0router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router\u2019s software and functionality, potentially compromising the integrity of the affected device."}], "id": "CVE-2026-123178", "lastModified": "2026-11-10T17:17:23.463", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 4.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 0.9, "impactScore": 3.6, "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "UNREPORTED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "AMBER", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "LOW"}, "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}]}, "published": "2026-11-10T17:17:23.463", "references": [{"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "url": "https://www.netgear.com/support/product/rbr350"}, {"source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "url": "https://www.netgear.com/support/product/rbs350"}], "sourceIdentifier": "a2826606-91e7-4eb6-899e-8484bd4575d5", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "a2826606-91e7-4eb6-899e-8484bd4575d5", "type": "Secondary"}]}

{}

{}