CVE-2026-82079: Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack

Q: Which devices are affected?

Nintendo Switch systems running a version earlier than 23.0.0 are affected.

Q: What does an attacker need to exploit this issue?

The attacker must be within local wireless range and send crafted network traffic to the Nintendo Switch local wireless networking functionality. Successful exploitation may enable arbitrary code execution using return-oriented programming.

Q: How can I check whether a system is affected?

Check the Nintendo Switch system software version. Systems running a version before 23.0.0 should be treated as affected.

Published Sep 10, 2026

Updated

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0.

Affected Software

1 affected component

Nintendo Switch<23.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Nintendo Switch system software to a version that resolves this vulnerability.
Fixed in 23.0.0

Event History

Sep 10, 2026

CVE Published

via MITRE·05:13 AM

Data Sourced

via MITRE·05:13 AM

RemedyDescriptionWeakness

Frequently Asked Questions

Which devices are affected?

Nintendo Switch systems running a version earlier than 23.0.0 are affected.

What does an attacker need to exploit this issue?

The attacker must be within local wireless range and send crafted network traffic to the Nintendo Switch local wireless networking functionality. Successful exploitation may enable arbitrary code execution using return-oriented programming.

How can I check whether a system is affected?