CVE-2026-43835: High severity vulnerability
Published Oct 20, 2026
·Updated
A vulnerability in the firmware upgrade functionality could allow an authenticated attacker to upload a forged firmware upgrade file, potentially compromising the device permanently.
Event History
Oct 20, 2026
CVE Published
via MITRE·08:02 AM
Data Sourced
via MITRE·08:02 AM
RemedyDescription
Data Sourced
via NVD·08:16 AM
DescriptionSeverity
Frequently Asked Questions
1
What level of access would an attacker need to exploit this issue?
The attacker must be authenticated before they can upload a forged firmware upgrade file.
2
Could a successful exploit survive normal device recovery steps?
The issue could potentially compromise the device permanently, because it involves installation of a forged firmware upgrade file.