Nintendo Switch QR Code Vulnerability Allows Code Execution

Uk.Pcmag

Nintendo Switch QR Code Vulnerability Allows Code Execution

First seen 14 Sep 2026, 16:02 UTC • •60.6

Article Content

1 / 5

Browse articles

ThreatCluster •September 14, 2026 at 16:52 UTC

•CVE-2026-82079 allows code execution via QR codes on Nintendo Switch.
•Exploitation requires proximity to the console to scan QR codes.
•Nintendo has released a patch; users should update to version 23.0.0 immediately.

Nintendo has disclosed a high-severity vulnerability (CVE-2026-82079) affecting the first-generation Switch console, which allows nearby attackers to execute unauthorized code or access console data via QR codes. The flaw is linked to the 'Send to Smartphone' feature and local wireless networking, requiring an attacker to scan a QR code displayed on the console. The vulnerability was reported by unnamed security researchers and was published on September 10, 2026. Nintendo has since released a patch (version 23.0.0) to address the issue, urging users to update their systems. The vulnerability cannot be exploited on the newer Nintendo Switch 2, which does not use QR codes for data transfer. Users are advised to avoid exposing QR codes to others until they can apply the patch.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-09-10

CVE-2026-82079 published

Nintendo disclosed a vulnerability allowing unauthorized code execution via QR codes on the Switch.

2026-09-10

Security researchers report vulnerability

Unnamed researchers reported the QR code vulnerability to Nintendo, prompting a security advisory.

2026-09-14

Patch released

Nintendo released system update 23.0.0 to fix the QR code vulnerability, urging users to update.

More articles in this cluster (4)

Threat Graph

9 entities, 14 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Malware
Zero-day Exploit

Organization (1)

Nintendo

Vulnerability (1)

CVE-2026-82079

Weakness (1)

CWE-120 - Classic Buffer Overflow

Affected Platform (4)

Android
Nintendo Switch
Nintendo Switch 2
Windows

Relationships

CVE-2026-82079 targets Android
CVE-2026-82079 targets Nintendo Switch
CVE-2026-82079 targets Nintendo Switch 2
CVE-2026-82079 targets Windows
Malware targets Android
Malware targets Nintendo Switch
Malware targets Nintendo Switch 2
Malware targets Windows
Zero-day Exploit targets Android
Zero-day Exploit targets Nintendo Switch
Zero-day Exploit targets Nintendo Switch 2
Zero-day Exploit targets Windows
CVE-2026-82079 related to Nintendo
CVE-2026-82079 related to CWE-120 - Classic Buffer Overflow

Following this threat?

Track Nintendo and CVE-2026-82079 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches A critical CVE-2026-85706 path-traversal vulnerability in GitLab (CVSS 10.0) was exploited in the wild just hours after its disclosure on September 12, 2026. Microsoft released its largest-ever patch batch, addressing 974 vulnerabilities, including several actively exploited Windows flaws. The GitLab flaw allows…