CVE-2026-49309: Medium severity vulnerability
Published Sep 9, 2026
·Updated
Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Event History
Sep 9, 2026
CVE Published
via MITRE·03:59 AM
Data Sourced
via MITRE·03:59 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an attacker to already be authenticated or have privileges on the device?
No prior privileges are required. However, the attack vector is physical and exploitation requires user interaction.
2
What are the practical exploitation constraints?
An attacker needs physical access and must overcome high attack complexity. The provided data does not indicate that remote-only attackers can exploit this issue.
3
What security properties are affected if exploitation succeeds?
The impact is limited to confidentiality, with high confidentiality impact indicated. No integrity or availability impact is indicated.