Vulnerability-Lookup

GHSA-H6XV-84V7-XHR4

Vulnerability from github – Published: 2026-07-14 18:32 – Updated: 2026-07-14 18:32

Details

A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take control of the device.

Severity

4.9 (Medium)


                  
                    CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-62657"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-599"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-14T18:18:47Z",
    "severity": "MODERATE"
  },
  "details": "A security flaw in the router\u0027s certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device.",
  "id": "GHSA-h6xv-84v7-xhr4",
  "modified": "2026-07-14T18:32:42Z",
  "published": "2026-07-14T18:32:42Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62657"
    },
    {
      "type": "WEB",
      "url": "https://www.netgear.com/support/product/mr70"
    },
    {
      "type": "WEB",
      "url": "https://www.netgear.com/support/product/ms70"
    },
    {
      "type": "WEB",
      "url": "https://www.netgear.com/support/product/raxe500"
    },
    {
      "type": "WEB",
      "url": "https://www.netgear.com/support/product/xr1000"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber",
      "type": "CVSS_V4"
    }
  ]
}

CVE-2026-62657 (GCVE-0-2026-62657)

Vulnerability from cvelistv5 – Published: 2026-07-14 17:46 – Updated: 2026-07-14 17:46

Title

Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models

Summary

Severity

4.9 (Medium)


                        
                          CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber

CWE

CWE-599 - Missing validation of OpenSSL certificate

Assigner

NETGEAR

References

4 references

URL	Tags
https://www.netgear.com/support/product/mr70/	productpatch
https://www.netgear.com/support/product/raxe500/	productpatch
https://www.netgear.com/support/product/ms70/	productpatch
https://www.netgear.com/support/product/xr1000/	productpatch

Impacted products

4 products

Vendor	Product	Version
NETGEAR	MR70	Affected: 0 , < V1.0.4.48 (custom)
NETGEAR	MS70	Affected: 0 , < V1.0.4.48 (custom)
NETGEAR	RAXE500	Affected: 0 , < V1.2.14.114 (custom)
NETGEAR	XR1000	Affected: 0 , < V1.0.2.86 (custom)

Date Public

2026-07-14 00:00

Credits

fluorescent

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "MR70",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "V1.0.4.48",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MS70",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "V1.0.4.48",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RAXE500",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "V1.2.14.114",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "XR1000",
          "vendor": "NETGEAR",
          "versions": [
            {
              "lessThan": "V1.0.2.86",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "fluorescent"
        }
      ],
      "datePublic": "2026-07-14T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eA security flaw in the router\u0027s certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device.\u003c/p\u003e"
            }
          ],
          "value": "A security flaw in the router\u0027s certificate validation process was\ndiscovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take\ncontrol of the device."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-233",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-233 Privilege Escalation"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "HIGH",
            "attackRequirements": "PRESENT",
            "attackVector": "ADJACENT",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "UNREPORTED",
            "privilegesRequired": "NONE",
            "providerUrgency": "AMBER",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-599",
              "description": "CWE-599 Missing validation of OpenSSL certificate",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-14T17:46:13.757Z",
        "orgId": "a2826606-91e7-4eb6-899e-8484bd4575d5",
        "shortName": "NETGEAR"
      },
      "references": [
        {
          "tags": [
            "product",
            "patch"
          ],
          "url": "https://www.netgear.com/support/product/mr70/"
        },
        {
          "tags": [
            "product",
            "patch"
          ],
          "url": "https://www.netgear.com/support/product/raxe500/"
        },
        {
          "tags": [
            "product",
            "patch"
          ],
          "url": "https://www.netgear.com/support/product/ms70/"
        },
        {
          "tags": [
            "product",
            "patch"
          ],
          "url": "https://www.netgear.com/support/product/xr1000/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eDevices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\u003c/p\u003e\u003ctable style=\"border-collapse:collapse;\"\u003e\u003cthead\u003e\u003ctr\u003e\u003cth style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003eProduct\u003c/th\u003e\u003cth style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003eFixed Version\u003c/th\u003e\u003c/tr\u003e\u003c/thead\u003e\u003ctbody\u003e\u003ctr\u003e\u003ctd style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003e\u003cb\u003eMR70\u003c/b\u003e Nighthawk Mesh WiFi 6 Router\u003c/td\u003e\u003ctd style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003e\u003ca href=\"https://www.netgear.com/support/product/mr70/\"\u003eV1.0.4.48\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003e\u003cb\u003eMS70\u003c/b\u003e Nighthawk Mesh WiFi 6 Add-on Satellite\u003c/td\u003e\u003ctd style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003e\u003ca href=\"https://www.netgear.com/support/product/ms70/\"\u003eV1.0.4.48\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003e\u003cb\u003eRAXE500\u003c/b\u003e Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router\u003c/td\u003e\u003ctd style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003e\u003ca href=\"https://www.netgear.com/support/product/raxe500/\"\u003eV1.2.14.114\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003ctr\u003e\u003ctd style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003e\u003cb\u003eXR1000\u003c/b\u003e Nighthawk WiFi 6 Pro Gaming Router\u003c/td\u003e\u003ctd style=\"border:1px solid gray;padding:4px 8px;text-align:left;\"\u003e\u003ca href=\"https://www.netgear.com/support/product/xr1000/\"\u003eV1.0.2.86\u003c/a\u003e\u003c/td\u003e\u003c/tr\u003e\u003c/tbody\u003e\u003c/table\u003e"
            }
          ],
          "value": "Devices with automatic updates enabled may already have this patch applied. If not, please check the firmware version and update it to the latest. Fixed in:\n\nProductFixed VersionMR70 Nighthawk Mesh WiFi 6 Router V1.0.4.48 https://www.netgear.com/support/product/mr70/ MS70 Nighthawk Mesh WiFi 6 Add-on Satellite V1.0.4.48 https://www.netgear.com/support/product/ms70/ RAXE500 Nighthawk AX12 12-Stream AXE11000 Tri-Band WiFi 6E Router V1.2.14.114 https://www.netgear.com/support/product/raxe500/ XR1000 Nighthawk WiFi 6 Pro Gaming Router V1.0.2.86 https://www.netgear.com/support/product/xr1000/"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models",
      "x_generator": {
        "engine": "Vulnogram 1.0.3"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a2826606-91e7-4eb6-899e-8484bd4575d5",
    "assignerShortName": "NETGEAR",
    "cveId": "CVE-2026-62657",
    "datePublished": "2026-07-14T17:46:13.757Z",
    "dateReserved": "2026-07-14T16:31:02.508Z",
    "dateUpdated": "2026-07-14T17:46:13.757Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

GHSA-H6XV-84V7-XHR4

CVE-2026-62657 (GCVE-0-2026-62657)

Tags

Sightings

Nomenclature