{"id":"CVE-2026-123178","kind":"vulnerability","aliases":["CVE-2026-123178"],"related":[],"title":"NETGEAR Orbi router: authenticated admin can run unauthorized commands locally","description":"An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.","summary":"NETGEAR Orbi routers have an input validation flaw that lets an authenticated administrator on the local network run unauthorized commands. An attacker could change the router's software and functionality, which compromises the device's integrity.","severity":"medium","cvss":4.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["home-router","infrastructure","netgear","orbi"],"not_affected_if":["no-orbi-routers","unauthenticated-only-exposure"],"how_to_check":"- Log in to the Orbi admin interface and note the firmware version shown there\n- Compare it with the fixed versions from NETGEAR's advisory, which the sources do not list","fix":null,"status":"open","published_at":"2026-11-10T17:17:23+00:00","first_seen_at":"2026-11-10T17:22:40+00:00","triaged_at":"2026-11-10T17:25:45+00:00","updated_at":"2026-11-10T17:25:45+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-10T17:25:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"NETGEAR Orbi router: authenticated admin can run unauthorized commands locally","impact":"high","summary":"NETGEAR Orbi routers have an input validation flaw that lets an authenticated administrator on the local network run unauthorized commands. An attacker could change the router's software and functionality, which compromises the device's integrity.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["netgear","orbi","home-router"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Admin runs unauthorized commands and modifies router firmware","analyst_note":"Find NETGEAR's advisory for CVE-2026-123178 to confirm affected models, fixed firmware versions and any fix.","how_to_check":"- Log in to the Orbi admin interface and note the firmware version shown there\n- Compare it with the fixed versions from NETGEAR's advisory, which the sources do not list\n- unknown for affected model list beyond the description","plain_action":"","product_name":"NETGEAR Orbi router","needs_analyst":true,"not_affected_if":["no-orbi-routers","unauthenticated-only-exposure"],"who_is_affected":"Only the listed NETGEAR Orbi router models are named, and the attacker must already be an authenticated administrator on the local network. Teams that run Orbi routers on a local network should check firmware; those with no Orbi devices can skip it. The sources do not list the affected firmware versions.","user_interaction":"no","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000744,"input_tokens":4539,"output_tokens":580,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-123178':13A,16A '-2026':12A,15A 'admin':5A 'administr':35B,74C 'affect':98C 'allow':71C 'attack':44B 'authent':4A,34B,73C 'chang':46B 'command':9A,42B,83C 'compromis':54B,93C 'connect':75C 'could':45B 'cve':11A,14A 'devic':56B,99C 'execut':81C 'flaw':30B 'function':52B,91C 'home':18B 'home-rout':17B 'infrastructur':20B 'input':28B,61C 'insuffici':60C 'integr':58B,95C 'let':32B 'list':66C 'local':10A,38B,78C 'model':69C 'modifi':85C 'netgear':1A,21B,23B,67C 'network':39B,79C 'orbi':2A,22B,24B,68C 'potenti':92C 'router':3A,19B,25B,48B,70C,87C 'run':7A,40B 'softwar':50B,89C 'unauthor':8A,41B,82C 'valid':29B,62C 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":"Only the listed NETGEAR Orbi router models are named, and the attacker must already be an authenticated administrator on the local network. Teams that run Orbi routers on a local network should check firmware; those with no Orbi devices can skip it. The sources do not list the affected firmware versions.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["homerouter","infrastructure","medium","netgear","orbi"],"campaign_type":null,"search_a":"'-123178':13A,16A '-2026':12A,15A 'admin':5A 'authent':4A 'command':9A 'cve':11A,14A 'local':10A 'netgear':1A 'orbi':2A 'router':3A 'run':7A 'unauthor':8A","search_b":"'administr':35B 'attack':44B 'authent':34B 'chang':46B 'command':42B 'compromis':54B 'could':45B 'devic':56B 'flaw':30B 'function':52B 'home':18B 'home-rout':17B 'infrastructur':20B 'input':28B 'integr':58B 'let':32B 'local':38B 'netgear':21B,23B 'network':39B 'orbi':22B,24B 'router':19B,25B,48B 'run':40B 'softwar':50B 'unauthor':41B 'valid':29B","search_c":"'administr':74C 'affect':98C 'allow':71C 'authent':73C 'command':83C 'compromis':93C 'connect':75C 'devic':99C 'execut':81C 'function':91C 'input':61C 'insuffici':60C 'integr':95C 'list':66C 'local':78C 'model':69C 'modifi':85C 'netgear':67C 'network':79C 'orbi':68C 'potenti':92C 'router':70C,87C 'softwar':89C 'unauthor':82C 'valid':62C 'vulner':63C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-10T17:17:23+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:D/RE:L/U:Amber","cvss_by":"a2826606-91e7-4eb6-899e-8484bd4575d5","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-123178","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123178","severity":null,"published_at":"2026-11-10T17:17:23+00:00","modified_at":"2026-11-10T17:17:23+00:00","first_seen_at":"2026-11-10T17:22:40+00:00","fetched_at":"2026-11-10T17:22:40+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}