CVE-2026-82079Patch

MEDIUMCVSS 7.0 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A stack-based buffer overflow vulnerability in the Nintendo Switch local wireless networking functionality may allow an attacker within wireless range to execute arbitrary code using return-oriented programming (ROP) through crafted network traffic. This issue affects Nintendo Switch: before 23.0.0.

Back to dashboard

4.3/ 10 priority

Sources & remediation

Other references

https://www.nintendo.com/security-advisories/en/index.html

Weakness type (CWE)

CWE-121

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

DECLINING

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
26 mentions across 9 observed days
Momentum state: declining

What's happening

Exploit tool or code specified in 1 signal
PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 17 signals
Technical details provided in 20 signals
Disclosure: 8 classified signals
Peaked 5d ago at 7 mentions (2026-09-14); latest day: 1
26 total mentions across 9 days

Deep dive

Activity timeline26 mentions / 9d

Signal classification4 categories

Patch

1661.5%

Disclosure

830.8%

Exploit

13.8%

General

13.8%

Referenced assets15 URLs

By indicator

Classification over time

Date	Total	Labels

2026-09-11	3	Patch3
2026-09-12	1	Patch1
2026-09-13	1	Patch1
2026-09-14	7	Disclosure2Exploit1Patch4
2026-09-15	6	Disclosure3General1Patch2
2026-09-16	5	Disclosure2Patch3
2026-09-18	1	Patch1
2026-09-24	1	Patch1
2026-10-06	1	Disclosure1

Full discourse20 posts

Pirat_Nation 🔴@Pirat_Nation46d
Patch
Nintendo has warned Switch owners about a security vulnerability involving QR codes displayed by the console. The issue, CVE-2026-82079, affects QR codes generated by the Switch when using the Album feature to share screenshots and videos with smartphones. The same vulnerability can also be triggered through Mario Kart Live: Home Circuit, which uses QR codes Nintendo says the flaw could potentially allow unauthorized code execution and data theft and the company has addressed the issue with firmware version 23.0.0 and recommends updating affected consoles. Nintendo recommends avoiding these QR-code features around people they don’t trust, the interesting part is that Switch 2 is not affected by this
Post summary
Nintendo has identified a QR‑code–related vulnerability (CVE‑2026‑82079) that could permit unauthorized code execution and data theft. The company has released firmware 23.0.0 as a fix and urges users to update.
1366287916544.3K
362.0K followersView on X
Autumn Good@autumn_good_3542d
Disclosure
『第三者がQRコードを直接読み取れる状況では、不正なコードの実行や、本体が保持する情報を取得される可能性があります。』 2026-09-10 任天堂株式会社 Nintendo Switchの近接リモート攻撃による本体情報漏えいの可能性（CVE-2026-82079） [PDF] https://www.nintendo.com/security-advisories/assets/pdf/20260910.pdf
Post summary
The advisory announces CVE-2026-82079 affecting Nintendo Switch, explaining that a proximity remote attack via QR code could lead to malicious code execution or information disclosure, and provides a PDF advisory without mentioning patches or active exploitation.
05132147236.5K
7.3K followersView on X
elhacker.NET@elhackernet41d
Patch
Vulnerabilidad en Nintendo Switch permite ejecutar código no autorizado Nintendo ha corregido una vulnerabilidad de alta gravedad (CVE-2026-82079) en la Nintendo Switch original https://blog.elhacker.net/2026/09/vulnerabilidad-en-nintendo-switch.html
Post summary
The text announces a high-severity vulnerability (CVE-2026-82079) in the Nintendo Switch that allows unauthorized code execution and highlights that Nintendo has already corrected the issue with a patch.
015159125.1K
142.5K followersView on X
Senhor Linguica Pro@SrLinguicaVIVE45d
Patch
Nintendo corrige vulnerabilidade crítica no Switch, com a nova firmware 23.0.0. O problema, CVE-2026-82079, afeta os QR codes gerados pelo Switch ao usar o recurso de Álbum para compartilhar capturas de tela e vídeos com smartphones. O Switch 2 não é afetado, o app com ele funciona como um mini servidor na nuvem.
Post summary
Nintendo released firmware 23.0.0 to patch critical CVE‑2026‑82079, which impacts QR code generation for the Switch’s Album sharing feature, while Switch 2 remains unaffected. No exploit code, active exploitation reports, or technical detail suggests a broader threat context.
34066811.8K
39.6K followersView on X
Poli@moe_hw20d
Disclosure
Yay, got a CVE assigned by Nintendo for the Switch recently: CVE-2026-82079 Nothing new, but I’m definitely interested in looking into Switch 1/2 further! https://www.cve.org/CVERecord?id=CVE-2026-82079
Post summary
The user announces the assignment of CVE-2026-82079 for Nintendo Switch and expresses interest in further investigation, but the text lacks detailed vulnerability information or remediation guidance.
0201631.0K
193 followersView on X
Takumi Sueda@puhitaku43d
Disclosure
任天堂のアプリがシステムアップデートの通知を出してきて珍しい。High severity の脆弱性が出てたらしいので関連あるかも https://www.cve.org/CVERecord?id=CVE-2026-82079
Post summary
A Japanese-language post briefly flags a high-severity Nintendo-related CVE (CVE-2026-82079) with a cve.org link and speculates it may relate to app update notifications, but provides no technical details, PoC, exploit, or confirmed patch information.
0001342.0K
5.3K followersView on X
IT-Connect.fr@ITConnect_fr40d
Disclosure
🛑 Nintendo Switch : une faille permet d’exécuter du code via le code QR affiché à l’écran Difficile à exploiter, mais quand même. Plus d'infos : - https://www.it-connect.fr/nintendo-switch-faille-code-qr-cve-2026-82079/ #nintendo #infosec https://t.co/JHZrlUX6zm
Post summary
The tweet reports a Nintendo Switch vulnerability (CVE‑2026‑82079) that can be exploited through a malicious QR code to execute arbitrary code, though it is described as difficult to exploit. Additional details are linked for further reading.
040100989
11.7K followersView on X
LiloWORLD@liloworldgames44d
Patch
Nintendo corrige falha de QR Code no Switch original com a atualização 23.0.0 A Nintendo disponibilizou a atualização de sistema 23.0.0 para fechar uma brecha de segurança no Nintendo Switch original (catalogada como CVE-2026-82079). A vulnerabilidade poderia permitir a execução de códigos não autorizados e o acesso a dados salvos no console, embora o Nintendo Switch 2 não seja vulnerável à obtenção de dados por essa falha. A exploração depende de condições bem específicas: um invasor precisa estar fisicamente próximo e escanear o QR code exibido na tela do Switch ou da TV. O risco ocorre em recursos que geram esses códigos pelo próprio console, como a opção de "Enviar para smartphone" no álbum de fotos/vídeos e o pareamento do kart físico em Mario Kart Live: Home Circuit. Embora nenhum ataque real contra usuários tenha sido registrado, a empresa recomenda atualizar o console imediatamente através das configurações de sistema para garantir a proteção.
Post summary
Nintendo released system update 23.0.0 to fix CVE-2026-82079, a QR‑code exploitation flaw that could allow local execution of unauthorized code; no real‑world attacks have been reported, so users are advised to update immediately.
03090485
518 followersView on X
横浜539@PutStickerOn41d
Disclosure
珍しいゲーム機の脆弱性情報や。 Productは「Nintendo Switch」 Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack https://www.cve.org/CVERecord?id=CVE-2026-82079
Post summary
The post discloses a potential Nintendo Switch information leakage vulnerability described as a proximity-based remote attack. It lacks PoC, exploit tooling, active exploitation, and patch information.
110812.1K
3.6K followersView on X
PCMag Greece@PCMagGR42d
Patch
⚠️Η ευπάθεια CVE-2026-82079 επιτρέπει την εκτέλεση κακόβουλου κώδικα στο αρχικό Switch. Διαθέσιμη η ενημέρωση 23.0.0 που διορθώνει το πρόβλημα. Τι ισχύει με το Nintendo Switch 2. #NintendoSwitch #CyberSecurityNews https://gr.pcmag.com/security/52792/nintendo-switch-proeidopoiese-gia-keno-asphaleias-meso-ton-qr-codes-apostoles-stigmiotupon-othones
Post summary
The post reports that CVE-2026-82079 can allow malicious code execution on the original Nintendo Switch and highlights that update 23.0.0 fixes the issue. No PoC, exploit tool, or active exploitation is mentioned.
01021125
2.7K followersView on X
ThaleZOliver | Sou Nintendista@ThaleZOliver45d
Patch
📌 NINTENDO SWITCH TEM VULNERABILIDADE DE SEGURANÇA CORRIGIDA NA ATUALIZAÇÃO 23.0.0! A Nintendo publicou um aviso de segurança sobre uma vulnerabilidade que afeta consoles Nintendo Switch com versões do sistema anteriores à 23.0.0. Identificada como CVE-2026-82079, a falha pode, em determinadas condições, permitir que uma pessoa próxima ao console execute código não autorizado ou obtenha informações armazenadas no aparelho. O ataque depende de uma situação bastante específica: a pessoa mal-intencionada precisa conseguir escanear diretamente um QR Code exibido pelo Nintendo Switch ou na TV. A Nintendo identificou dois cenários: 📱 Enviar para Smartphone, no Álbum do Nintendo Switch 🏎️ Mario Kart Live: Home Circuit, durante o uso do kart A vulnerabilidade não pode ser explorada quando terceiros não conseguem visualizar e escanear o QR Code exibido pelo console. 🛡️ COMO SE PROTEGER? A Nintendo recomenda atualizar o Nintendo Switch para a versão mais recente do sistema, atualmente a 23.0.0. Nintendo Switch 2 não é afetado por essa vulnerabilidade para obtenção de informações do console. Caso não seja possível atualizar imediatamente, a Nintendo recomenda utilizar o recurso Enviar para Smartphone e o Mario Kart Live: Home Circuit somente em locais onde outras pessoas não possam visualizar ou escanear os QR Codes. #NintendoSwitch
Post summary
Nintendo disclosed CVE‑2026‑82079 and advised users to update to firmware 23.0.0, emphasizing the patch as the primary mitigation.
00030484
1.8K followersView on X
CyberSignal | Cybersecurity & AI News@XQOPTRX42d
Patch
🎮 NINTENDO SECURITY — A SWITCH VULNERABILITY CAN LET A NEARBY ATTACKER EXECUTE UNAUTHORIZED CODE CVE-2026-82079 CyberSignal Priority: 🟡 MEDIUM A September 14 security report highlights a high-severity vulnerability affecting the ORIGINAL Nintendo Switch. Affected firmware: < 23.0.0 The flaw exists in: LOCAL WIRELESS NETWORKING. It's a: STACK-BASED BUFFER OVERFLOW. Attack flow: attacker nearby ↓ victim uses affected sharing workflow ↓ QR code scanned ↓ malicious device joins temporary local network ↓ crafted packets sent ↓ memory corruption ↓ potential code execution Affected workflows include: → Album “Send to Smartphone” → Mario Kart Live: Home Circuit smartphone functionality Nintendo says successful exploitation could impact: CONFIDENTIALITY INTEGRITY AVAILABILITY and potentially allow unauthorized code execution or information access. CVSS 4.0: 7.0 — HIGH Important caveat: This is NOT an internet-scale remote exploit. An attacker needs proximity and specific victim interaction, including QR-code scanning. The issue was originally disclosed by Nintendo on September 10; the additional cybersecurity coverage was published September 14. 🛡️ Action Update the original Nintendo Switch to: 23.0.0+ 🧠 CyberSignal insight “Local-only” doesn't mean harmless. It means the attacker's challenge changes from: FIND AN IP to: GET CLOSE ENOUGH. Source: Nintendo · Cyber Security News September 14 coverage
Post summary
The text discloses CVE-2026-82079, a stack-based buffer overflow in the original Nintendo Switch (firmware < 23.0.0) exploitable via local wireless networking and QR code scanning, and recommends updating to firmware 23.0.0 or later as remediation.
01010132
215 followersView on X
しーにゃ♪@公式@Syynya41d
Patch
Nintendo Switchに危険度の高い脆弱性 CVE-2026-82079　近接リモート攻撃で任意コード実行・本体情報取得の可能性、23.0.0で修正 https://rocket-boys.co.jp/security-measures-lab/nintendo-switch-cve-2026-82079-security-update/
Post summary
The text announces a high-risk arbitrary code execution vulnerability in the Nintendo Switch (CVE-2026-82079) exploitable via proximity remote attacks, noting that it is patched in version 23.0.0.
1000086
917 followersView on X
64ユニ@64Uni_Lions41d
Disclosure
ニンテンドースイッチの脆弱性ですって奥様 https://www.cve.org/CVERecord?id=CVE-2026-82079 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N 悪用シナリオがパッと思いつかない Vector string
Post summary
Brief Japanese post announces CVE-2026-82079 for Nintendo Switch, shares the CVSS 4.0 vector, and questions exploitability, but provides no PoC, exploit code, patch, or active-exploitation evidence.
000011.0K
6.0K followersView on X
たいちゃん@Taichi3A42d
Disclosure
当たり前だけど、Nintendo って書いてある中々見る機会がないな NVD-CVE-2026-82079 https://nvd.nist.gov/vuln/detail/cve-2026-82079
Post summary
The text announces the existence of CVE-2026-82079 by linking to its NVD entry but provides no additional indicators of PoC, exploitation, patches, or technical details.
00010600
1.3K followersView on X
Daily CyberSecurity@Daily_CyberSec42d
Exploit
Discover the dangerous Nintendo Switch QR code vulnerability (CVE-2026-82079) allowing hackers to execute code. Learn how system update 23.0.0 fixes it. #NintendoSwitch #CyberSecurity #CVE202682079 #QRCode #Vulnerability https://meterpreter.org/nintendo-switch-qr-code-vulnerability/
Post summary
The text announces CVE-2026-82079 (Nintendo Switch QR code RCE) and links to a Meterpreter-hosted page with exploit details, while noting patch availability via system update 23.0.0. The primary focus is on exploit tool availability.
00010458
13.0K followersView on X
iototsecnews@iototsecnews33d
Patch
Nintendo Switch の脆弱性 CVE-2026-82079 が FIX：QR Code の覗き見を利用した任意のコード実行 https://iototsecnews.jp/2026/09/15/nintendo-switch-qr-code-vulnerability-lets-nearby-attackers-execute-unauthorized-code/ Nintendo Switch のローカル無線通信機能において、スタックバッファオーバーフローに起因する脆弱性 CVE-2026-82079 が確認されました。近くにいる第三者に画面上の QR コードを閲覧された場合、細工されたデータ受信による任意のコード実行／保存データの漏洩といった影響が生じる恐れがあります。安全な利用環境を維持するため、システム設定からバージョン 23.0.0 以上の最新ファームウェアへ迅速に更新する対応が求められます。またアップデート完了までの間は、公共の場所などにおいて共有用画面を周囲に見られないよう配慮することや、信頼できない端末との連携を控える対策が必要となります。 #CVE202682079 #Nintendo #QRCode #Switch #Vulnerability
Post summary
The post describes Nintendo Switch CVE-2026-82079 as a stack buffer overflow in local wireless communication that can lead to arbitrary code execution or data leakage via QR-code-related attacks. Its primary actionable focus is remediation: update to firmware 23.0.0 or later and apply interim precautions.
00000130
515 followersView on X
NEXSIGHT@NEXSIGHTNEWS38d
Patch
任天堂がNintendo Switchの脆弱性CVE-2026-82079を公表、近距離の無線攻撃で不正なコードを実行される恐れ — 本体を23.0.0へ更新するよう案内 https://cyber.nexsight.co/articles/2026/09/18/nintendo-switch-cve-2026-82079-proximity-wireless-2026-09-18/
Post summary
Nintendo disclosed CVE‑2026‑82079, a proximity‑based wireless vulnerability that could allow arbitrary code execution on a Switch, and urges users to update to firmware version 23.0.0.
00000116
74 followersView on X
ByteCheck@ByteCheck10141d
Patch
🚨 NINTENDO SWITCH SECURITY ALERT Nintendo has patched a critical vulnerability that could let nearby attackers execute unauthorized code or access sensitive information. ⚠️ CVE-2026-82079 • Affects Switch firmware before 23.0.0 • Stack-based buffer overflow in local wireless networking • Requires an attacker to be nearby • Attack can be triggered by scanning a malicious QR code • Could potentially lead to arbitrary code execution 🎮 The vulnerable QR-code functionality appears in: 📱 Album → Send to Smartphone 🏎️ Mario Kart Live: Home Circuit ✅ Fixed: Nintendo Switch system update 23.0.0 Good news: Nintendo Switch 2 is not affected. 🔧 Nintendo urges Switch owners to update immediately. If you can't update, avoid showing generated QR codes to untrusted people and limit these features to your own devices. #NintendoSwitch #Nintendo #CVE #GamingSecurity #ZeroDay #SecurityUpdate #GameSecurity
Post summary
Nintendo has released a security update (23.0.0) that patches CVE‑2026‑82079, a stack‑based buffer overflow in Switch firmware that could allow nearby attackers to execute arbitrary code via a malicious QR code; users are urged to apply the update or limit QR‑code exposure.
00000114
16 followersView on X
thibault@akril41d
Disclosure
[IT-Connect] - Nintendo Switch : une faille permet d’exécuter du code via le code QR affiché à l’écran - https://www.it-connect.fr/nintendo-switch-faille-code-qr-cve-2026-82079/ 👌😁
Post summary
The tweet discloses a newly identified Nintendo Switch vulnerability (CVE‑2026‑82079) that permits code execution through QR codes, linking to an article for details, without mentioning a PoC, exploit tool, active exploitation, or patch.
0000055
689 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-82079

Pirat_Nation 🔴[verified]@Pirat_NationPatch

Nintendo has identified a QR‑code–related vulnerability (CVE‑2026‑82079) that could permit unauthorized code execution and data theft. The company has released firmware 23.0.0 as a fix and urges users to update.

Senhor Linguica Pro[verified]@SrLinguicaVIVEPatch

Nintendo released firmware 23.0.0 to patch critical CVE‑2026‑82079, which impacts QR code generation for the Switch’s Album sharing feature, while Switch 2 remains unaffected. No exploit code, active exploitation reports, or technical detail suggests a broader threat context.

Takumi Sueda[verified]@puhitakuDisclosure

A Japanese-language post briefly flags a high-severity Nintendo-related CVE (CVE-2026-82079) with a cve.org link and speculates it may relate to app update notifications, but provides no technical details, PoC, exploit, or confirmed patch information.

LiloWORLD[verified]@liloworldgamesPatch

Nintendo released system update 23.0.0 to fix CVE-2026-82079, a QR‑code exploitation flaw that could allow local execution of unauthorized code; no real‑world attacks have been reported, so users are advised to update immediately.

ThaleZOliver | Sou Nintendista[verified]@ThaleZOliverPatch

Nintendo disclosed CVE‑2026‑82079 and advised users to update to firmware 23.0.0, emphasizing the patch as the primary mitigation.

CyberSignal | Cybersecurity & AI News[verified]@XQOPTRXPatch

The text discloses CVE-2026-82079, a stack-based buffer overflow in the original Nintendo Switch (firmware < 23.0.0) exploitable via local wireless networking and QR code scanning, and recommends updating to firmware 23.0.0 or later as remediation.

64ユニ[verified]@64Uni_LionsDisclosure

Brief Japanese post announces CVE-2026-82079 for Nintendo Switch, shares the CVSS 4.0 vector, and questions exploitability, but provides no PoC, exploit code, patch, or active-exploitation evidence.

ByteCheck[verified]@ByteCheck101Patch

Nintendo has released a security update (23.0.0) that patches CVE‑2026‑82079, a stack‑based buffer overflow in Switch firmware that could allow nearby attackers to execute arbitrary code via a malicious QR code; users are urged to apply the update or limit QR‑code exposure.