Loading story…
Nintendo released firmware 23.0.0 to fix CVE-2026-82079, a high-severity stack-based buffer overflow in the original Nintendo Switch local wireless networking stack. A nearby attacker who scans a QR code displayed during the Album Send to Smartphone workflow—or the equivalent function in Mario Kart Live: Home Circuit—could join the temporary wireless environment and send crafted packets to execute unauthorized code or access console data.
The issue affects original Switch consoles running firmware earlier than 23.0.0; Nintendo Switch 2 is not affected. Nintendo said it had no evidence of exploitation in the wild as of September 10 and advised users unable to update immediately to avoid displaying affected QR codes publicly and restrict nearby access while using vulnerable features.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
Nintendo published an advisory for CVE-2026-82079, affecting original Switch consoles running firmware earlier than 23.0.0. The company said external security researchers reported the flaw and that it had no evidence of in-the-wild exploitation as of that date.
Nintendo released system update 23.0.0 to remediate CVE-2026-82079, a high-severity stack-based buffer overflow in the original Nintendo Switch local wireless networking code.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
cryptika.com
Open sourcecybersecuritynews.com
Open sourcecysecurity.news
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
QNAP disclosed two high-severity vulnerabilities affecting its **QVR Pro** and **QuNetSwitch** products that could be exploited remotely without authentication or user interaction. **CVE-2026-22898** is a missing authentication for critical function flaw in QVR Pro, classified as `CWE-306`, that can let remote attackers gain access to the system. QNAP said the issue is fixed in **QVR Pro 2.7.4.14** and later and published advisory **QSA-26-07**. QNAP also addressed **CVE-2026-22897**, a `CWE-78` command injection flaw in **QuNetSwitch** that could allow remote attackers to execute arbitrary commands on vulnerable devices. The company said the bug was fixed in **QuNetSwitch 2.0.4.0415** and later. Both CVE records carry **CVSS v4.0** assessments indicating network-based exploitation with low attack complexity, no required privileges, and no user interaction, making prompt patching a priority for exposed systems.
Jun 29, 2026
Qualcomm released security updates for multiple products to fix **one critical** and **five high-severity** vulnerabilities affecting WLAN, modem, and related platform components across a broad set of Snapdragon, FastConnect, QCA, QCN, WCN, WCD, WSA, and modem-RF products. Italy’s national CSIRT said the flaws could enable **arbitrary code execution**, **denial of service**, and **authentication bypass**, and urged organizations to review Qualcomm’s official bulletin for affected versions and remediation details. The most severe issue, **`CVE-2026-25289`**, is a **critical** stack-based buffer overflow in Qualcomm WLAN firmware with a **CVSS 9.6** score, caused by memory corruption when processing malformed Device Capability Extended attributes in certain NAN Service Discovery Frames. Qualcomm also disclosed **`CVE-2026-24079`**, a **high-severity** missing-authentication flaw in data modem registration handling rated **CVSS 8.1**, which can be triggered with malformed or absent authentication parameters; available records indicate no known exploitation for either issue, but customers were advised to apply vendor patches and update affected system software promptly.
Aug 4, 2026
Two high-severity vulnerabilities have been disclosed in **BUFFALO Wi-Fi router products**, exposing affected devices to arbitrary code execution and OS command execution. `CVE-2026-32669` is classified as **CWE-94** and allows code injection that could let an attacker run arbitrary code on vulnerable routers, while `CVE-2026-33280` is a **CWE-912** hidden functionality flaw that could expose debugging features and enable arbitrary OS commands. Both issues carry high impact across **confidentiality, integrity, and availability**, with published scoring indicating network-based exploitation and low attack complexity for the command injection issue. The vulnerability records list **JPCERT/CC** as the receiving party, and references were added to **JVN** and a **BUFFALO advisory page**, signaling vendor and coordination activity around the affected router line.
Jun 29, 2026