This vulnerability (CVE-2026-62657) affects the NETGEAR MR70 router and certain other models by failing to properly validate OpenSSL certificates during the device's certificate validation process. This missing validation (CWE-599) could allow an unauthorized attacker with adjacent network access to remotely gain control over the device. The CVSS 4.0 vector indicates the attack requires high complexity and privileges are not required, with no user interaction needed. The vulnerability is published but no official remediation or patch information is available at this time.

An attacker with access to the adjacent network could exploit this vulnerability to remotely access and take control of the affected NETGEAR MR70 router. This could lead to unauthorized device control, potentially impacting network security and device functionality. However, the attack complexity is high and no known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor NETGEAR advisories for updates. No specific mitigations or temporary fixes are provided in the available data.