Medium · 4.9 CVE-2026-62657 EUVD-2026-44326GHSA-h6xv-84v7-xhr4

Certificate validation vulnerability in NETGEAR Gaming Router and certain Nighthawk models

Published Jul 14, 2026 · Updated Jul 15, 2026 · Assigned by NETGEAR

Vendor: NETGEAR Product: MR70 Product: MS70 Product: RAXE500 Product: XR1000 Category: Network devices

Description

A security flaw in the router's certificate validation process was
discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk models that could allow an unauthorized person to remotely access and take
control of the device.

Affected products

Vendor	Product	Affected	Fixed
NETGEAR	MR70	< V1.0.4.48	V1.0.4.48
NETGEAR	MS70	< V1.0.4.48	V1.0.4.48
NETGEAR	RAXE500	< V1.2.14.114	V1.2.14.114
NETGEAR	XR1000	< V1.0.2.86	V1.0.2.86

References

https://www.netgear.com/support/product/mr70/ product patch
https://www.netgear.com/support/product/raxe500/ product patch
https://www.netgear.com/support/product/ms70/ product patch
https://www.netgear.com/support/product/xr1000/ product patch
https://kb.netgear.com/000070859/July-2026-NETGEAR-Security-Advisory vendor-advisory