CVE-2026-62657

Medium

Description

A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device.

SeverityMedium

CVSS4.9

Exploit probability—

Product

XR1000

PublishedJul 14, 2026

First seenJul 14, 2026

Weakness typeCWE-599CWE-599

How to fix

Update

NETGEAR XR1000V1.0.2.86 or later
NETGEAR MR70V1.0.4.48 or later
NETGEAR MS70V1.0.4.48 or later
NETGEAR RAXE500V1.2.14.114 or later

Patches

Vendor advisories

kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory

Affected products

Product	Affected versions	Fixed in
NETGEAR XR1000	v < V1.0.2.86	V1.0.2.86
NETGEAR MR70	v < V1.0.4.48	V1.0.4.48
NETGEAR MS70	v < V1.0.4.48	V1.0.4.48
NETGEAR RAXE500	v < V1.2.14.114	V1.2.14.114

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.