Nintendo released a major system firmware update yesterday, and while most of the focus is on the Switch 2 adding support for VRR in docked mode, the Switch also got a patch.
Tacked on to the end of the official patch notes for the latest Switch update (Version 23.0.0) is a notice about a vulnerability fix.
This "vulnerability" has been confirmed in "limited scenarios" when scanning a QR code and using "Send to Smartphone feature" in the Album, or using a kart to play in Mario Kart Live: Home Circuit.
Nintendo's official security notice page shares more information about this in a PDF document. Here's the rundown:
The following vulnerabilities can be resolved by updating your system to the latest version.
2026.9.10 Potential Nintendo Switch Console Information Leak Due to Proximity-Based Remote Attack
A vulnerability* on Nintendo Switch has been confirmed in the following limited scenarios.
* To exploit this vulnerability, a bad actor must directly scan the QR code displayed on the Nintendo Switch console screen (or the TV screen).
1. When using the Send to Smartphone feature in the Album
2. When using a kart to play Mario Kart Live: Home Circuit
سەرچاوەی فەرمی بە زمانی ئینگلیزی: https://www.nintendolife.com/news/2026/09/nintendos-latest-system-firmware-update-resolves-switch-vulnerability
