CVE-2026-68589: Medium severity vulnerability

Published Nov 2, 2026

Updated

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01320076; Issue ID: MSV-6889.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Modem to a version that resolves this vulnerability.
Patch MOLY01320076

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need before this issue can be exploited?

The attacker must already have System privilege on the affected device. No user interaction is required.

What should teams use to track the vendor fix?

The vendor identifies the fix as Patch ID MOLY01320076 and Issue ID MSV-6889.

CVE-2026-68589: Medium severity vulnerability

Remediation

Event History

Frequently Asked Questions

What access does an attacker need before this issue can be exploited?

What should teams use to track the vendor fix?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need before this issue can be exploited?

What should teams use to track the vendor fix?