CVE-2026-123178

MEDIUM 4.5

Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350

CVSS Score

4.5

EPSS Score

0.0%

EPSS Percentile

0th

An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.

CWE	CWE-20
Vendor	netgear
Product	rbr350
Published	Nov 10, 2026
Last Updated	Nov 11, 2026

Stay Ahead of the Next One

Get instant alerts for netgear rbr350

Be the first to know when new medium vulnerabilities affecting netgear rbr350 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Affected Versions

NETGEAR / RBR350

0 < v4.4.3.4

NETGEAR / RBS350

0 < v4.4.3.4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

netgear.com: https://www.netgear.com/support/product/rbr350 netgear.com: https://www.netgear.com/support/product/rbs350

Credits

Lei Gu,Shanquan Yang,Boyu Kuang,Anmin Fu,Nanjing University of Science and Technology