Dashboard / CVE-2026-123178

CVE-2026-123178

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 39/100
Published: 2026-11-10 Modified: 2026-11-12 First seen: 2026-11-10 Status: active

Attack Surface

Adjacent Low Complexity No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: High
UI: None
S: X
AT: None
VC: None
VI: High
VA: None

Description

An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.

Weakness Classification (1)

Affected Software (8)

VendorProductVersion
NETGEAR RBR350 0 < v4.4.3.4
NETGEAR RBR350 0 < v4.4.3.4
NETGEAR RBR350 0 < v4.4.3.4
NETGEAR RBR350 0 < v4.4.3.4
NETGEAR RBS350 0 < v4.4.3.4
NETGEAR RBS350 0 < v4.4.3.4
NETGEAR RBS350 0 < v4.4.3.4
NETGEAR RBS350 0 < v4.4.3.4

References & Advisories (3)

Bug Bounty Relevance

39 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

4.3 / 10.0 v4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber

EPSS — Exploitation Probability

0.21%
Raw Score 0.002080
Percentile 11.0%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00208
2026-11-13
0.00208
2026-11-12
0.00208

Intelligence Sources

mitre ref →
nvd ref →

External Links