Security News

Cybersecurity news aggregator

CRITICAL Vulnerabilities SC Media

Nintendo patches critical Nintendo Switch vulnerability

A critical stack-based buffer overflow (CVE-2026-82079, CVSS 8.4) in the Nintendo Switch's local wireless networking allows nearby attackers to execute arbitrary code via specially crafted network traffic, triggered by scanning a QR code generated by features like "Send to Smartphone" or Mario Kart Live: Home Circuit. The vulnerability affects Switch systems running firmware versions prior to 23.0.0 and is patched in system update 23.0.0. For those unable to update immediately, Nintendo advises avoiding exposure of generated QR codes and limiting specific feature use to owner devices.
Read Full Article →

Vulnerability Management Nintendo patches critical Nintendo Switch vulnerability September 15, 2026 Share By SC Staff According to Cyber Insider, Nintendo has released a critical security update for its Nintendo Switch console, addressing a vulnerability that could allow nearby attackers to execute unauthorized code or access sensitive information. The vulnerability, identified as CVE-2026-82079, affects Switch systems running firmware versions prior to 23.0.0. Exploitation requires an attacker within close proximity to scan a QR code displayed on the Switch or a connected TV. This can occur when using the Album's "Send to Smartphone" feature or within the game Mario Kart Live: Home Circuit. The flaw is a stack-based buffer overflow in the console's local wireless networking functionality. An attacker can send specially crafted network traffic to trigger the overflow and potentially execute arbitrary code using return-oriented programming. Nintendo stated that the vulnerability cannot be exploited on the newer Nintendo Switch 2. The company addressed the issue with system update 23.0.0, urging users to update their consoles immediately. For those unable to update, Nintendo advises avoiding exposure of generated QR codes to others and limiting the use of specific features to the owner's devices. Source: Cyber Insider SC Staff Related Vulnerability Management Logitech Options+ vulnerability allows SYSTEM-level privilege escalation SC Staff September 15, 2026 The vulnerability was found in the software's updater service, which runs with extensive operating system access. Vulnerability Management Homebrew 7.0.0 released with built-in vulnerability scanner and improved security SC Staff September 15, 2026 Homebrew, widely used on macOS, is frequently targeted by threat actors to distribute info-stealer malware. AI benefits/risks AI has outpaced the patching clock – here’s what the industry needs to do Nathan Smolenski September 14, 2026 Five ways the industry can respond to the AI challenge. Related Events Cybercast State of Vulnerability Management On-Demand Event Cybercast Why Mythos is the cybersecurity crisis we need On-Demand Event Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Bug Buffer Overflow Disassembly You can skip this ad in 5 seconds

Share this article