{"id":"CVE-2026-123178","aliases":["EUVD-2026-121276","GHSA-8288-39c9-xw5m"],"status":"published","title":"Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350","description":"An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.","severity":{"version":"4.0","score":4.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber","level":"medium","assessor":"cna","from":"cve"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2026-11-10T16:03:17Z","modified":"2026-11-11T12:32:38Z","products":[{"vendor":"netgear","product":"rbr350"},{"vendor":"netgear","product":"rbs350"}],"references":[{"url":"https://www.netgear.com/support/product/rbr350","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/rbs350","tags":["product","patch"]},{"url":"https://kb.netgear.com/000070971/November-2026-NETGEAR-Security-Advisory","tags":["vendor-advisory","patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123178"},{"url":"https://github.com/advisories/GHSA-8288-39c9-xw5m"}],"sources":{"cve":[{"id":"CVE-2026-123178","title":"Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350","description":"An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.","status":"published","published":"2026-11-10T16:03:17.333Z","modified":"2026-11-11T11:38:38.418Z","cvss":[{"version":"4.0","score":4.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber","level":"medium","assessor":"cna"},{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-11T12:57:43.416809Z"}],"euvd":[{"id":"EUVD-2026-121276","description":"An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.","status":"published","published":"2026-11-10T16:03:17Z","modified":"2026-11-11T11:38:38Z","cvss":[{"version":"4.0","score":4.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber","level":"medium"}],"updated_at":"2026-11-11T13:28:47.336858Z"}],"ghsa":[{"id":"GHSA-8288-39c9-xw5m","title":"An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an...","description":"An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.","status":"published","published":"2026-11-10T18:31:44Z","modified":"2026-11-11T12:32:38Z","cvss":[{"version":"4.0","score":4.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber","level":"medium"},{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-11T12:34:06.835386Z"}],"nvd":[{"id":"CVE-2026-123178","description":"An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.","status":"published","published":"2026-11-10T17:17:23.463Z","modified":"2026-11-11T12:19:40.483Z","cvss":[{"version":"4.0","score":4.3,"vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-11T14:25:06.318016Z"}]}}