CVEvulnerability
CVE-2026-62657
4.9 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2026-07-14
- Last modified
- 2026-07-15
- Assigner
- a2826606-91e7-4eb6-899e-8484bd4575d5
- CVSS 4.0 (a2826606-91e7-4eb6-899e-8484bd4575d5)
- 4.9 MEDIUM — CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
- Weaknesses
- CWE-599
Description
A security flaw in the router's certificate validation process was
discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take
control of the device.
Related
Weakness · CWE (1)
- CWE-599 Missing Validation of OpenSSL Certificate weakness
References
- https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory kb.netgear.com
- https://www.netgear.com/support/product/mr70/ www.netgear.com
- https://www.netgear.com/support/product/ms70/ www.netgear.com
- https://www.netgear.com/support/product/raxe500/ www.netgear.com
- https://www.netgear.com/support/product/xr1000/ www.netgear.com