CVE-2026-56926: Android/:unknown: vulnerability

Q: Who can exploit this issue?

An attacker needs local access to the device. The issue can lead to local escalation of privilege, and no additional execution privileges or user interaction are required.

Q: What is the observable impact of exploitation?

An attacker may spoof subscription switch results and trigger a device reboot. The underlying issue is a confused deputy in multiple functions of PssSubscriptionManager.java.

Q: How can I determine whether a device is affected?

The provided data identifies Android but does not list affected versions, build identifiers, or configuration conditions. Check the November 1, 2026 Android security bulletin and the PUB-A-517377713 advisory for device-specific remediation information.

Published Nov 1, 2026

Updated

In multiple functions of PssSubscriptionManager.java, there is a possible way to spoof subscription switch results and trigger a device reboot due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected Software

1 affected componentFixes available

android/:unknown:>=Pixel-family specific:0<Pixel-family specific:2026-11-05

Pixel-family specific:2026-11-05

Event History

Nov 1, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

Who can exploit this issue?

An attacker needs local access to the device. The issue can lead to local escalation of privilege, and no additional execution privileges or user interaction are required.

What is the observable impact of exploitation?

An attacker may spoof subscription switch results and trigger a device reboot. The underlying issue is a confused deputy in multiple functions of PssSubscriptionManager.java.

How can I determine whether a device is affected?

The provided data identifies Android but does not list affected versions, build identifiers, or configuration conditions. Check the November 1, 2026 Android security bulletin and the PUB-A-517377713 advisory for device-specific remediation information.

CVE-2026-56926: Android/:unknown: vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the observable impact of exploitation?

How can I determine whether a device is affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the observable impact of exploitation?

How can I determine whether a device is affected?