Medium severity · published Jul 14, 2026
CVE-2026-62657
Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models
4.9
CVSS
0.2%
EPSS
No
On KEV
Description
A security flaw in the router's certificate validation process was
discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take
control of the device.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MR
MR70 · NETGEAR
before V1.0.4.48 · source: vendor
MS
MS70 · NETGEAR
before V1.0.4.48 · source: vendor
RA
RAXE500 · NETGEAR
before V1.2.14.114 · source: vendor
XR
XR1000 · NETGEAR
before V1.0.2.86 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-62657
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-62657
kb.netgear.com
https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory
www.netgear.com
https://www.netgear.com/support/product/mr70/
www.netgear.com
https://www.netgear.com/support/product/ms70/
www.netgear.com
https://www.netgear.com/support/product/raxe500/
www.netgear.com
https://www.netgear.com/support/product/xr1000/
More from MR70
8.1
CVE-2026-9213
Insufficient input validation in certain NETGEAR routers
6.4
CVE-2026-11739
Command injection vulnerability in some NETGEAR Nighthawk devices
4.5
CVE-2026-0418
Certain NETGEAR devices allow administrators to tamper with system
4.5
CVE-2026-0417
Insufficient input validation in certain NETGEAR routers
4.5
CVE-2026-9210
Certain NETGEAR routers allow authenticated administrators to gain unintended control of the router