{"affected":[{"defaultStatus":"unaffected","product":"RBR350","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"v4.4.3.4","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"RBS350","source":"CNA: NETGEAR","vendor":"NETGEAR","versions":[{"lessThan":"v4.4.3.4","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-123178","cwes":["CWE-20"],"description":"An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":4.3,"severity":"medium","source":"CNA: NETGEAR","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/V:D/RE:L/U:Amber","version":"4.0"},{"score":4.5,"severity":"medium","source":"CNA: NETGEAR","vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},{"score":4.3,"severity":"medium","source":"NVD: a2826606-91e7-4eb6-899e-8484bd4575d5","vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber","version":"4.0"},{"score":4.5,"severity":"medium","source":"NVD: a2826606-91e7-4eb6-899e-8484bd4575d5","vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N","version":"3.1"}],"modifiedAt":1794374372330,"publishedAt":1794326597333,"references":[{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbr350"},{"source":"CNA: NETGEAR","tags":["product","patch"],"url":"https://www.netgear.com/support/product/rbs350"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","tags":[],"url":"https://www.netgear.com/support/product/rbr350"},{"source":"a2826606-91e7-4eb6-899e-8484bd4575d5","tags":[],"url":"https://www.netgear.com/support/product/rbs350"}],"remediation":[{"kind":"fix","source":"CNA: NETGEAR","text":"Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionRBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router v4.4.3.4 https://www.netgear.com/support/product/rbr350 RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite v4.4.3.4 https://www.netgear.com/support/product/rbs350"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbr350"},{"kind":"fix","source":"CNA: NETGEAR","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://www.netgear.com/support/product/rbs350"}],"revision":"ed34c09fa978d3c3e3fc1182831df33a4b6f248c83b279ac13c3e268b319b157","sources":[{"modifiedAt":1794372979488,"name":"CNA: NETGEAR","retrievedAt":1794373813455,"url":"https://www.cve.org/CVERecord?id=CVE-2026-123178"},{"modifiedAt":1794374372330,"name":"NVD","retrievedAt":1794377791240,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123178"}],"ssvc":{"assessedAt":1794268800000,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350","updatedAt":1794377791240}