# CVE-2026-62657: NETGEAR Nighthawk and Gaming Routers certificate validation bypass

Source: https://junglewise.ai/threats/cve-2026-62657-netgear-nighthawk-and-gaming-routers-certificate-validation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-14. Updated: 2026-07-14  
License: CC BY 4.0 with a link back

CVE-2026-62657 · Severity: info · CVSS 4.9 · Published 2026-07-14

A security flaw in the certificate validation process of several NETGEAR Nighthawk and gaming routers could allow an unauthorized person to gain remote access to the device. These routers are used to manage home and small office network traffic and security. If exploited, an attacker could take full control of the router, potentially monitoring network traffic or modifying device settings.

Technologies: [NETGEAR MR70](https://junglewise.ai/threats/technologies/mr70), [NETGEAR MS70](https://junglewise.ai/threats/technologies/ms70), [NETGEAR RAXE500](https://junglewise.ai/threats/technologies/raxe500), [NETGEAR XR1000 Gaming Router](https://junglewise.ai/threats/technologies/xr1000). Vendors: [NETGEAR](https://junglewise.ai/threats/vendors/netgear).

## Quick answers

**Is CVE-2026-62657 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-62657 being exploited in the wild.

**How severe is CVE-2026-62657?** Informational severity, with a CVSS score of 4.9, published 14 July 2026.

**Which products and versions are affected?** NETGEAR MR70 < V1.0.4.48; NETGEAR MS70 < V1.0.4.48; NETGEAR RAXE500 < V1.2.14.114; NETGEAR XR1000 Gaming Router < V1.0.2.86.

**Is there a fix for CVE-2026-62657?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-62657 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-62657?** Check whether you run NETGEAR MR70, NETGEAR MS70, NETGEAR RAXE500 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability classified as CWE-599 (Missing Validation of OpenSSL Certificate) exists in the certificate validation logic of multiple NETGEAR router models, including the XR1000 and RAXE500. The flaw allows an attacker to bypass security checks during the SSL/TLS handshake process. According to the CVSS 4.0 vector, the attack requires an adjacent network position and high complexity, likely involving a man-in-the-middle (MitM) scenario. Successful exploitation can lead to unauthorized remote access and full administrative control over the device. Patches have been released for affected models, including versions V1.0.4.48 for MR70/MS70, V1.2.14.114 for RAXE500, and V1.0.2.86 for XR1000.

## Affected products

- NETGEAR MR70 < V1.0.4.48
- NETGEAR MS70 < V1.0.4.48
- NETGEAR RAXE500 < V1.2.14.114
- NETGEAR XR1000 Gaming Router < V1.0.2.86

## Timeline

- 2026-07-14: disclosed: Initial publication of CVE-2026-62657
- 2026-07-14: advisory

## References

- [https://www.netgear.com/support/product/mr70/](https://www.netgear.com/support/product/mr70/)
- [https://www.netgear.com/support/product/ms70/](https://www.netgear.com/support/product/ms70/)
- [https://www.netgear.com/support/product/raxe500/](https://www.netgear.com/support/product/raxe500/)
- [https://www.netgear.com/support/product/xr1000/](https://www.netgear.com/support/product/xr1000/)

## Related threats

- [A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker…](https://junglewise.ai/threats/cve-2026-11739-a-command-injection-vulnerability-in-certain-affected-netgear)
- [NETGEAR RAX Routers command execution via improper input validation](https://junglewise.ai/threats/cve-2026-62656-netgear-rax-routers-command-execution-via-improper-input)
- [NETGEAR Gaming Routers remote code execution via traffic tampering](https://junglewise.ai/threats/cve-2026-9213-netgear-gaming-routers-remote-code-execution-via-traffic-tampering)
- [Netgear RAXE450 and RAXE500 improper input validation in management interface](https://junglewise.ai/threats/cve-2026-0416-netgear-raxe450-and-raxe500-improper-input-validation-in)
- [A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation…](https://junglewise.ai/threats/cve-2025-12946-a-vulnerability-in-the-speedtest-feature-of-affected-netgear)