Nintendo Switch Flaw Lets Nearby Attackers Run Code, Steal Data
A newly disclosed Nintendo Switch vulnerability is pushing owners of the original console toward an urgent firmware update, particularly those who tend to play in public spaces.
A newly disclosed Nintendo Switch vulnerability is pushing owners of the original console toward an urgent firmware update, particularly those who tend to play in public spaces. Nintendo confirmed the vulnerability in Nintendo Switch systems in a PDF advisory released Sept. Importantly, this vulnerability in Nintendo Switch hardware is limited to the original console. The Nintendo Switch 2 is not affected in any way.
The vulnerability in Nintendo Switch firmware has been formally logged as CVE-2026-82079. Players who exclusively game at home are already shielded from this particular vulnerability in Nintendo Switch systems and don't need to take any further action, since the exploit depends on a nearby attacker being in physical wireless range to intercept the QR code. 9 and detailing the vulnerability the very next day — owners are being urged to update sooner rather than later, especially if they regularly play in cafes, transit, or other shared spaces where an unfamiliar device could realistically pick up a stray QR code.
The vulnerability in Nintendo Switch firmware has been formally logged as CVE-2026-82079. Players who exclusively game at home are already shielded from this particular vulnerability in Nintendo Switch systems and don't need to take any further action, since the exploit depends on a nearby attacker being in physical wireless range to intercept the QR code. 9 and detailing the vulnerability the very next day — owners are being urged to update sooner rather than later, especially if they regularly play in cafes, transit, or other shared spaces where an unfamiliar device could realistically pick up a stray QR code.
Nintendo has not offered additional detail beyond its advisory. Given how quickly Nintendo moved from patch release to public disclosure — releasing the fix Sept.
For anyone who can't update right away, Nintendo has outlined a few stopgap measures.
What changed
Fixing the Nintendo Switch Vulnerability Nintendo's remedy is straightforward: install firmware 23.0.0, which the company released Sept.
Who is affected
That same QR-code mechanism is also used by Super Mario Kart: Home Circuit when played on its physical cartridge, since the game relies on a QR code to establish a wireless connection between nearby players.
The danger arises when someone other than the intended user scans that QR code first.
Doing so lets a stranger's device link up with the Switch console, opening the door to running unauthorized code on the machine or pulling data straight off it.
Because account information lives on the console itself, that's a real risk for anyone exposed to this Nintendo Switch vulnerability while gaming around others.
It's described as a stack-based buffer overflow, a type of flaw that can allow an attacker within wireless range to execute code on the device.
More broadly, Nintendo advises against ever scanning a QR code using a device that isn't your own.
The technical picture
The vulnerability in Nintendo Switch firmware has been formally logged as CVE-2026-82079.
Players who exclusively game at home are already shielded from this particular vulnerability in Nintendo Switch systems and don't need to take any further action, since the exploit depends on a nearby attacker being in physical wireless range to intercept the QR code.
9 and detailing the vulnerability the very next day — owners are being urged to update sooner rather than later, especially if they regularly play in cafes, transit, or other shared spaces where an unfamiliar device could realistically pick up a stray QR code.
How organizations are responding
Nintendo has not offered additional detail beyond its advisory.
Given how quickly Nintendo moved from patch release to public disclosure — releasing the fix Sept.
What defenders should do now
For anyone who can't update right away, Nintendo has outlined a few stopgap measures.
What to watch next
Watch for revised fixed-version guidance and confirmation that mitigations are holding in affected environments.
What remains unknown
The available reporting does not establish whether the issue is being actively exploited in the wild.
The available reporting does not establish who is behind the activity, if an attacker is involved.