CVE-2026-123178: Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350

Published Nov 10, 2026

Updated

An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade NETGEAR Orbi RBR350/RBS350 to a version that resolves this vulnerability.
Fixed in 4.4.3.4

Event History

Nov 10, 2026

CVE Published

via MITRE·04:03 PM

Data Sourced

via MITRE·04:03 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Is user interaction required for exploitation?

No. The CVSS vector indicates that no user interaction is required.

What level of access does an attacker need?

The attacker must have high privileges and be connected via the adjacent/local network. The attack complexity is rated low.

What is the expected security impact?

The vulnerability has a high integrity impact, meaning an attacker may alter the device’s software or functionality. The CVSS vector indicates no confidentiality or availability impact.

CVE-2026-123178: Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350

Remediation

Event History

Frequently Asked Questions

Is user interaction required for exploitation?

What level of access does an attacker need?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

Is user interaction required for exploitation?

What level of access does an attacker need?

What is the expected security impact?