This vulnerability (CVE-2026-62657) concerns a missing validation step in the OpenSSL certificate handling within the NETGEAR MR70 router and some Nighthawk models. The flaw allows an unauthorized remote attacker to potentially bypass certificate validation, leading to unauthorized remote access and control of the affected devices. The CVSS 4.0 base score is 4.9, reflecting medium severity with attack vector as adjacent network, high attack complexity, and no privileges required. No official remediation or patch information is currently available.

An attacker who exploits this vulnerability could remotely access and take control of the affected router without proper authorization. This could compromise the device's security and potentially the network it manages. However, the attack complexity is high and the attacker must be on an adjacent network, which limits the ease of exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been disclosed, users should monitor NETGEAR advisories for updates. Until a patch is available, restricting access to the router's management interfaces and limiting network exposure may reduce risk.