CVE-2026-20600: Medium severity vulnerability

Published Nov 2, 2026

Updated

In Modem, there is a possible application crash due to a logic error. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01416152; Issue ID: MSV-7924.

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What conditions must an attacker meet to exploit this issue?

The attacker must control a rogue base station and have a UE connect to it. No additional execution privileges or user interaction are required.

What is the expected impact if exploitation succeeds?

Successful exploitation can crash the modem application, causing a remote denial of service. The provided vector indicates no confidentiality or integrity impact.

How can this issue be tracked with the vendor?

The vendor identifies the fix as Patch ID MOLY01416152 and tracks the issue as MSV-7924.

CVE-2026-20600: Medium severity vulnerability

Event History

Frequently Asked Questions

What conditions must an attacker meet to exploit this issue?

What is the expected impact if exploitation succeeds?

How can this issue be tracked with the vendor?

Company

Resources

Contact

Frequently Asked Questions

What conditions must an attacker meet to exploit this issue?

What is the expected impact if exploitation succeeds?

How can this issue be tracked with the vendor?