CVE-2026-62657

Published Jul 14, 2026

Last updated a month ago

CVSS medium 4.9
Netgear

Overview

Description
A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device.
Source
a2826606-91e7-4eb6-899e-8484bd4575d5
NVD status
Deferred

Risk scores

CVSS 4.0

Type
Secondary
Base score
4.9
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber
Severity
MEDIUM

Weaknesses

a2826606-91e7-4eb6-899e-8484bd4575d5
CWE-599

Social media

Hype score
Not currently trending

  1. 🚨*CVE* CVE-2026-62657 A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an una… https://t.co/XSkDQsg73J ----- Traducción: CVE-2026-62657 Un … https://t.co/utmtNg

    @infoflowcloud

    14 Jul 2026

    33 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.•CVE-2026-11737
  2. SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability•CVE-2026-15409
  3. A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to run unauthorized commands or code on the router.•CVE-2026-62658
  4. A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or restart unexpectedly, disrupting network connectivity and making the device temporarily unavailable.•CVE-2026-62655
  5. Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability•CVE-2026-56291

References

Sources include official advisories and independent security research.