NETGEAR's Product Security Team has assessed the following product vulnerabilities and provided guidance to address these vulnerabilities in the table below.
Because firmware updates contain security fixes, bug fixes, and new features for your products, we strongly advise you to enable automatic firmware updates on supported devices. For older products, we advise you to download and install new firmware updates as soon as possible or follow the guidance provided for devices that require other remediation steps.
CVE-2026-123180 Missing Authentication Vulnerability in the NETGEAR Nighthawk RAX30
A missing authentication vulnerability in the RAX30 allows a network adjacent attacker who has authenticated to the WiFi network to obtain sensitive information and tamper with device configuration, including administrator credentials, without authenticating to the device. This affects the confidentiality, integrity and availability of the router.
Severity: MEDIUM
Acknowledgments: Gentile, Michael
Affected Products
Recommendation
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:
| Product | Fixed Version |
|---|---|
| RAX30 Nighthawk AX5 5-Stream AX2400 WiFi 6 Router | v1.0.15.110 |
CVE-2026-123178 Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350 models
An insufficient input validation vulnerability in Orbi RBR350 models allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router's software and functionality, potentially compromising the integrity of the affected device.
Severity: MEDIUM
Acknowledgments: Lei Gu, Shanquan Yang, Boyu Kuang, Anmin Fu, Nanjing University of Science and Technology
Recommendation
Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:
| Product | Fixed Version |
|---|---|
| RBR350 Orbi AX1800 WiFi 6 Dual-band Mesh Router | v4.4.3.4 |
| RBS350 Orbi AX1800 WiFi 6 Dual-band Mesh Add-on Satellite | v4.4.3.4 |
Disclaimer: This document is provided on an "as is" basis and does not imply any kind of guarantee or warranty, including the warranties of merchantability or fitness for a particular use. Your use of the information in the document or materials linked to the document is at your own risk. NETGEAR reserves the right to change or update this document at any time. NETGEAR expects to update this document as new information becomes available.
The above-listed vulnerabilities remain if you do not complete all recommended steps. NETGEAR is not responsible for any consequences that could have been avoided by following the recommendations in this notification.