{"id":"CVE-2026-62657","aliases":["EUVD-2026-44326","GHSA-h6xv-84v7-xhr4"],"status":"published","title":"Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models","description":"A security flaw in the router's certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device.","severity":{"version":"4.0","score":4.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0015,"percentile":0.04226,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-599"],"published":"2026-07-14T17:46:13Z","modified":"2026-07-15T18:31:47Z","products":[{"vendor":"netgear","product":"mr70"},{"vendor":"netgear","product":"ms70"},{"vendor":"netgear","product":"raxe500"},{"vendor":"netgear","product":"xr1000"}],"references":[{"url":"https://www.netgear.com/support/product/mr70/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/raxe500/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/ms70/","tags":["product","patch"]},{"url":"https://www.netgear.com/support/product/xr1000/","tags":["product","patch"]},{"url":"https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62657"},{"url":"https://www.netgear.com/support/product/mr70"},{"url":"https://www.netgear.com/support/product/ms70"},{"url":"https://www.netgear.com/support/product/raxe500"},{"url":"https://www.netgear.com/support/product/xr1000"},{"url":"https://github.com/advisories/GHSA-h6xv-84v7-xhr4"}],"sources":{"cve":[{"id":"CVE-2026-62657","title":"Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models","description":"A security flaw in the router's certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device.","status":"published","published":"2026-07-14T17:46:13.757Z","modified":"2026-07-15T16:56:03.166Z","cvss":[{"version":"4.0","score":4.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber","level":"medium","assessor":"cna"}],"cwes":["CWE-599"],"updated_at":"2026-11-02T14:20:14.999906Z"}],"euvd":[{"id":"EUVD-2026-44326","description":"A security flaw in the router's certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device.","status":"published","published":"2026-07-14T17:46:13Z","modified":"2026-07-15T16:56:03Z","cvss":[{"version":"4.0","score":4.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber","level":"medium"}],"updated_at":"2026-11-02T18:19:52.35951Z"}],"ghsa":[{"id":"GHSA-h6xv-84v7-xhr4","title":"A security flaw in the router's certificate validation process was\ndiscovered in the NETGEAR...","description":"A security flaw in the router's certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device.","status":"published","published":"2026-07-14T18:32:42Z","modified":"2026-07-15T18:31:47Z","cvss":[{"version":"4.0","score":4.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","level":"medium"}],"cwes":["CWE-599"],"updated_at":"2026-11-02T15:09:33.182129Z"}],"nvd":[{"id":"CVE-2026-62657","description":"A security flaw in the router's certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device.","status":"published","published":"2026-07-14T18:18:47.857Z","modified":"2026-07-15T18:20:21.237Z","cvss":[{"version":"4.0","score":4.9,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","level":"medium","assessor":"secondary"}],"cwes":["CWE-599"],"updated_at":"2026-11-02T14:12:29.879716Z"}]}}