---
id: "CVE-2026-123178"
page: "https://infrastack.ai/live/CVE-2026-123178"
kind: "vulnerability"
aliases: ["CVE-2026-123178"]
title: "NETGEAR Orbi router: authenticated admin can run unauthorized commands locally"
severity: "medium"
cvss: 4.5
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["home-router", "infrastructure", "netgear", "orbi"]
not_affected_if: ["no-orbi-routers", "unauthenticated-only-exposure"]
published_at: "2026-11-10T17:17:23+00:00"
first_seen_at: "2026-11-10T17:22:40+00:00"
updated_at: "2026-11-10T17:25:45+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-123178", "first_seen_at": "2026-11-10T17:22:40+00:00"}]
exploit_sources: []
---

# NETGEAR Orbi router: authenticated admin can run unauthorized commands locally

Link for people: https://infrastack.ai/live/CVE-2026-123178 (this .md is for agents)

NETGEAR Orbi routers have an input validation flaw that lets an authenticated administrator on the local network run unauthorized commands. An attacker could change the router's software and functionality, which compromises the device's integrity.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Log in to the Orbi admin interface and note the firmware version shown there
- Compare it with the fixed versions from NETGEAR's advisory, which the sources do not list

## Timeline

- 2026-11-10T17:22:40+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-123178

## From the sources

An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compromising the integrity of the affected device.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_