Nintendo launched a significant system firmware replace yesterday, and whereas a lot of the focus is on the Change 2 including assist for VRR in docked mode, the Change additionally received a patch.
Tacked on to the tip of the official patch notes for the most recent Change replace (Model 23.0.0) is a discover a couple of vulnerability repair.
This “vulnerability” has been confirmed in “restricted situations” when scanning a QR code and utilizing “Ship to Smartphone function” within the Album, or utilizing a kart to play in Mario Kart Stay: House Circuit.
Nintendo’s official safety discover web page shares extra details about this in a PDF doc. Here is the rundown:
Safety Discover for Nintendo Change – tenth September 2026
The next vulnerabilities will be resolved by updating your system to the most recent model.
2026.9.10 Potential Nintendo Change Console Info Leak As a consequence of Proximity-Primarily based Distant Assault
A vulnerability* on Nintendo Change has been confirmed within the following restricted situations.
* To take advantage of this vulnerability, a foul actor should immediately scan the QR code displayed on the Nintendo Change console display (or the TV display).
1. When utilizing the Ship to Smartphone function within the Album
2. When utilizing a kart to play Mario Kart Stay: House Circuit
In both case, this vulnerability can’t be exploited in an surroundings the place a 3rd social gathering can’t scan the QR code displayed on the Nintendo Change console display (or the TV display).
Conversely, if a 3rd social gathering can immediately scan the QR code, they may run unauthorized code in your Nintendo Change console or acquire info saved on the console.
Affected Merchandise
This problem impacts Nintendo Change (system model sooner than 23.0.0).
Word: This vulnerability can’t be exploited to acquire console info on Nintendo Change 2.
As Nintendo notes, this problem impacts Change system working on any replace earlier than Model 23.0.0. It is also offered some “Preventive Measures”, asking customers to replace to the most recent system model. If you cannot do that “immediately”, it recommends the next:
“Be sure you are in an surroundings the place a 3rd social gathering can’t scan the QR code displayed on the console display (or the TV) whenever you use the Ship to Smartphone function within the Album or use a kart to play Mario Kart Stay: House Circuit.”
“Keep away from utilizing a sensible system aside from your personal when utilizing the Ship to Smartphone function within the Album. Equally, keep away from utilizing karts aside from your personal when taking part in Mario Kart Stay: House Circuit”
You could find out about Model 23.0.0 for the Change and Change 2 in our full patch notes put up. Nintendo has additionally up to date a number of sport updates this week.