{"id":"CVE-2026-62657","state":"PUBLISHED","title":"Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models","description":"A security flaw in the router's certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device.","publishedAt":"2026-07-14T17:46:13.757Z","updatedAt":"2026-07-15T16:56:03.166Z","severity":{"score":4.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber","source":"NETGEAR"},"assigner":"NETGEAR","products":["NETGEAR MR70","NETGEAR MS70","NETGEAR RAXE500","NETGEAR XR1000"],"affected":[{"vendor":"NETGEAR","product":"MR70","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V1.0.4.48","versionType":"custom"}]},{"vendor":"NETGEAR","product":"MS70","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V1.0.4.48","versionType":"custom"}]},{"vendor":"NETGEAR","product":"RAXE500","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V1.2.14.114","versionType":"custom"}]},{"vendor":"NETGEAR","product":"XR1000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V1.0.2.86","versionType":"custom"}]}],"references":["https://www.netgear.com/support/product/mr70/","https://www.netgear.com/support/product/raxe500/","https://www.netgear.com/support/product/ms70/","https://www.netgear.com/support/product/xr1000/","https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory"],"weaknesses":["CWE-599"],"ingestedAt":"2026-10-29T20:12:32.778Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/62xxx/CVE-2026-62657.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-62657","state":"PUBLISHED","datePublished":"2026-07-14T17:46:13.757Z","dateUpdated":"2026-07-15T16:56:03.166Z","assignerShortName":"NETGEAR","assignerOrgId":"a2826606-91e7-4eb6-899e-8484bd4575d5","dateReserved":"2026-07-14T16:31:02.508Z"},"containers":{"cna":{"title":"Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models","descriptions":[{"lang":"en","value":"A security flaw in the router's certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device."}],"affected":[{"vendor":"NETGEAR","product":"MR70","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V1.0.4.48","versionType":"custom"}]},{"vendor":"NETGEAR","product":"MS70","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V1.0.4.48","versionType":"custom"}]},{"vendor":"NETGEAR","product":"RAXE500","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V1.2.14.114","versionType":"custom"}]},{"vendor":"NETGEAR","product":"XR1000","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"V1.0.2.86","versionType":"custom"}]}],"references":[{"url":"https://www.netgear.com/support/product/mr70/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/raxe500/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/ms70/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/xr1000/","tags":["product","patch"]},{"url":"https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"ADJACENT","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"NONE","userInteraction":"NONE","vulnConfidentialityImpact":"HIGH","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"NONE","vulnAvailabilityImpact":"NONE","subAvailabilityImpact":"NONE","exploitMaturity":"UNREPORTED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"AMBER","version":"4.0","baseSeverity":"MEDIUM","baseScore":4.9,"vectorString":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-599","lang":"en","description":"CWE-599 Missing validation of OpenSSL certificate","type":"CWE"}]}],"providerMetadata":{"shortName":"NETGEAR","orgId":"a2826606-91e7-4eb6-899e-8484bd4575d5","dateUpdated":"2026-07-15T16:56:03.166Z"},"datePublic":"2026-07-14T00:00:00.000Z","impacts":[{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233 Privilege Escalation"}]}],"solutions":[{"lang":"en","value":"Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionMR70 Nighthawk Mesh WiFi 6 Router V1.0.4.48 https://www.netgear.com/support/product/mr70/ MS70 Nighthawk Mesh WiFi 6 Add-on Satellite V1.0.4.48 https://www.netgear.com/support/product/ms70/ RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router V1.2.14.114 https://www.netgear.com/support/product/raxe500/ XR1000 Nighthawk WiFi 6 Pro Gaming Router V1.0.2.86 https://www.netgear.com/support/product/xr1000/","supportingMedia":[{"type":"text/html","base64":false,"value":"<p>Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:</p><table style=\"border-collapse:collapse;\"><thead><tr><th style=\"border:1px solid gray;padding:4px 8px;text-align:left;\">Product</th><th style=\"border:1px solid gray;padding:4px 8px;text-align:left;\">Fixed Version</th></tr></thead><tbody><tr><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><b>MR70</b> Nighthawk Mesh WiFi 6 Router</td><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><a href=\"https://www.netgear.com/support/product/mr70/\">V1.0.4.48</a></td></tr><tr><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><b>MS70</b> Nighthawk Mesh WiFi 6 Add-on Satellite</td><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><a href=\"https://www.netgear.com/support/product/ms70/\">V1.0.4.48</a></td></tr><tr><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><b>RAXE500</b> Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router</td><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><a href=\"https://www.netgear.com/support/product/raxe500/\">V1.2.14.114</a></td></tr><tr><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><b>XR1000</b> Nighthawk WiFi 6 Pro Gaming Router</td><td style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"><a href=\"https://www.netgear.com/support/product/xr1000/\">V1.0.2.86</a></td></tr></tbody></table>"}]}],"credits":[{"lang":"en","value":"fluorescent","type":"finder"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 1.0.3"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-07-15T14:47:08.884742Z","id":"CVE-2026-62657","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-07-15T15:12:49.036Z"}}]}}}