CVE-2026-62657

A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device.

Score

CVSS 4.0 4.9 Medium

Status

Deferred - a2826606-91e7-4eb6-899e-8484bd4575d5

Published

2026-07-14

Last modified

2026-07-15

Weaknesses

CWE-599

Affected products

• Mr70 (Netgear)
• Ms70 (Netgear)
• Raxe500 (Netgear)
• Xr1000 (Netgear)

References

• https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory
• https://www.netgear.com/support/product/mr70/
• https://www.netgear.com/support/product/ms70/
• https://www.netgear.com/support/product/raxe500/
• https://www.netgear.com/support/product/xr1000/