Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-66086: Modem OTA stack may be crashed or hijacked
CVE-2026-66086 · published today
Summary
The modem's over-the-air communication code can be tricked by specially crafted scheduling data, causing it to stop working or let an attacker take control. This can happen without needing any special privileges and may lead to service interruptions. Apply the latest firmware or security update from the supplier as soon as possible to protect your devices.
Original advisory text
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of ...
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-121Stack-based Buffer Overflow
Timeline
Published12 Oct 2026
Updated12 Oct 2026
First seen12 Oct 2026
Sources
CVE-2026-66086 · NVD
Track software like this
Free during beta