CVE-2026-62657: Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models

Published Jul 14, 2026

Updated

A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device.

Affected Software

2 affected components

Netgear NETGEAR XR1000 Gaming Router

Netgear NETGEAR Nighthawk models

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade NETGEAR MR70 Nighthawk Mesh WiFi 6 Router to a version that resolves this vulnerability.
Fixed in V1.0.4.48
Upgrade
Upgrade NETGEAR MS70 Nighthawk Mesh WiFi 6 Add-on Satellite to a version that resolves this vulnerability.
Fixed in V1.0.4.48
Upgrade
Upgrade NETGEAR RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router to a version that resolves this vulnerability.
Fixed in V1.2.14.114
Upgrade
Upgrade NETGEAR XR1000 Nighthawk WiFi 6 Pro Gaming Router to a version that resolves this vulnerability.
Fixed in V1.0.2.86
Compensating control
Until patched, restrict access to the device over the network to trusted parties only (since the flaw was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models and could allow an unauthorized person to remotely access and take control of the device).

Event History

Jul 14, 2026

CVE Published

via MITRE·05:46 PM

Data Sourced

via MITRE·05:46 PM

RemedyDescriptionWeakness

Data Sourced

via NVD·06:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-62657?

The severity of CVE-2026-62657 is rated as medium with a CVSS score of 4.9.

How do I fix CVE-2026-62657?

To fix CVE-2026-62657, you should update your NETGEAR XR1000 Gaming Router or affected Nighthawk models to the latest firmware provided by NETGEAR.

What devices are affected by CVE-2026-62657?

CVE-2026-62657 affects the NETGEAR XR1000 Gaming Router and certain Nighthawk models.

What type of vulnerability is CVE-2026-62657?

CVE-2026-62657 is a certificate validation vulnerability that could allow unauthorized remote access to the router.

What are the consequences of CVE-2026-62657?

The consequences of CVE-2026-62657 include the potential for unauthorized users to remotely access and take control of affected NETGEAR routers.