{"id":892107,"date":"2026-09-14T21:30:10","date_gmt":"2026-09-14T21:30:10","guid":{"rendered":"https:\/\/www.newsbeep.com\/au\/892107\/"},"modified":"2026-09-14T21:30:10","modified_gmt":"2026-09-14T21:30:10","slug":"nintendo-switch-owners-should-update-their-firmware-after-security-exploit-discovered","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/au\/892107\/","title":{"rendered":"Nintendo Switch Owners Should Update Their Firmware After Security Exploit Discovered"},"content":{"rendered":"

Owners of the original Nintendo Switch should patch a security exploit immediately, especially if they game in public. Nintendo announced the vulnerability<\/a> (PDF) on Sept. 10, shortly after releasing its latest 23.0.0 firmware update.<\/p>\n

The exploit applies only to original Nintendo Switch owners using the Send to Smartphone<\/a> feature. This feature generates a QR code on the Switch that you can scan with a smartphone, letting you transfer game captures and screenshots directly to your phone.\u00a0<\/p>\n

It also affects people playing Super Mario Kart: Home Circuit<\/a> on the physical cartridge, as the game uses a QR code to establish a wireless link with nearby players.\u00a0<\/p>\n

Should someone else scan the QR code before you, they can connect their device to your Switch and use the connection to run unauthorized code on your Switch or steal information stored on the game console. Since your account information is stored on your Switch, that\u2019s information you don\u2019t want in the hands of someone else.\u00a0<\/p>\n

A Nintendo representative did not immediately respond to a request for further comment.<\/p>\n

The exploit does not affect the Nintendo Switch 2<\/a>.\u00a0<\/p>\n

How to fix the problem<\/p>\n

The fix is pretty simple. Nintendo released update 23.0.0<\/a> on Sept. 9, which fixes the exploit. It\u2019s recorded as CVE-2026-82079, which is \u201ca stock-based buffer overflow vulnerability\u201d that lets attackers within wireless range execute code. It only affects the original Switch on firmware versions older than 23.0.0.<\/p>\n

To update your Nintendo Switch, head to System Settings > System > System Update to apply the update. Follow any additional on-screen prompts to install the update.\u00a0<\/p>\n

Nintendo says that those who can\u2019t immediately update their firmware can avoid the issue by only using the Send to Smartphone feature at home, where attackers can\u2019t see them, or by not playing Super Mario Kart: Home Circuit in public. The gaming giant also recommends not scanning any QR codes with any device that isn\u2019t yours.\u00a0<\/p>\n

People who only play games at home are protected from this exploit and don\u2019t have to worry about it.<\/p>\n

\t\t\t\t\t\t\t\"Joe\t\t\t\t\t\t<\/p>\n

\t\t\t\t\t\t\t\t\t\t\tJoe is a freelance journalist. It all started with a long-running affection for building his own PCs, which he did for the first time as a teenager. It evolved into a lifelong enjoyment of putting words on the internet about the subject. He’s written for CNET, PCMag, Mashable and SlashGear as a freelance writer, and worked as a Senior Editor at Android Authority for 10 years. When he’s not writing about tech and science, he’s learning the ins and outs of DIY home repair, gaming, playing his bass guitars and posting help on PC building and gaming subreddits. He is a staunch believer that orange juice should have pulp.
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\tSee full bio\t\t\t\t\t<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"Owners of the original Nintendo Switch should patch a security exploit immediately, especially if they game in public.…\n","protected":false},"author":2,"featured_media":892108,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[64,63,105],"class_list":["post-892107","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-au","tag-australia","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/892107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=892107"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/892107\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/892108"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=892107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=892107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=892107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}