The 2.0.6 update was unexpected, as it arrived months after the last significant patch in February 2022. Unlike the massive 2.0 update, which brought Kapp'n, Brewster, and cooking, this patch notes were incredibly sparse. November 14, 2022 Version: 2.0.6 (NSP/Patch)
Crucially, it appears these bugs were not discovered by malicious actors. They were identified through a responsible disclosure process, likely part of a "bug bounty" program where security researchers report vulnerabilities to a company in exchange for a reward. This allowed Nintendo to fix the issue privately before it could be exploited, and the 2.0.6 update for "Animal Crossing," "Splatoon 2," "ARMS," and "Super Mario Maker 2" was the silent roll-out of that fix. Animal Crossing New Horizons -NSP--Update 2.0.6... Fixed
: Fixed a bug that could potentially allow attackers to execute arbitrary code on a user's Nintendo Switch remotely. Crash Protection Crash Protection Nintendo reportedly learned of these bugs
Nintendo reportedly learned of these bugs through a bug bounty program and issued the patch before any widespread public exploitation occurred. Gameplay Adjustments and "Stability" " "Splatoon 2