GoKawiilNintendo patches Switch QR code exploit letting nearby hackers hijack consoles
Nintendo disclosed a security flaw affecting original Switch consoles that exploits the QR codes used by the Send to Smartphone feature and Super Mario Kart: Home Circuit's wireless pairing. If someone scans the QR code before the owner does, they can connect to the console and run unauthorized code or steal stored account data. Nintendo fixed the issue, tracked as CVE-2026-82079, in firmware update 23.0.0 released September 9.
GoKawiil's interpretation of the reporting above, not reported fact.
Because the attack works simply by intercepting a QR code within wireless range in public, casual gamers using handheld mode in cafes, airports or transit could be exposed without realizing it. The flaw doesn't touch the Switch 2, but original Switch owners who skip updates or play Home Circuit publicly remain at risk until they patch.
- Original Switch owners should update to firmware 23.0.0 immediately to close the exploit.
- The bug is a stack-based buffer overflow triggered via malicious QR code scans in wireless range.
- Until updated, avoid using Send to Smartphone or playing Super Mario Kart: Home Circuit in public places.
Anker PowerCore Portable Charger — Keep your Nintendo Switch and other devices charged on the go with the Anker PowerCore Portable Charger. This reliable power bank ensures you can update your firmware and stay protected from security exploits without worrying about battery life, whether you're gaming in public or traveling.
See Anker PowerCore Portable Charger on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: cnet.com — Joe Hindy, 2026-09-14
Published there as: “Nintendo Switch Owners Should Update Their Firmware After Security Exploit Discovered”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.