CVE-2026-68591: Medium severity vulnerability

Published Nov 2, 2026

Updated

In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Modem to a version that resolves this vulnerability.
Patch ALPS09608864 / ALPS09327759

Event History

Nov 2, 2026

CVE Published

via NVD·03:17 AM

Data Sourced

via NVD·03:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who is realistically exposed to this issue?

Exploitation requires an attacker to have already obtained System privilege on the affected device. This is therefore a local privilege-escalation concern rather than an unauthenticated remote attack.

Is user interaction required?

No. The issue can be exploited without user interaction once the attacker has the required System privilege.

What is the impact if exploitation succeeds?

The permissions bypass can lead to local escalation of privilege in the Modem component, with high confidentiality, integrity, and availability impact according to the provided vector.

CVE-2026-68591: Medium severity vulnerability

Remediation

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

Is user interaction required?

What is the impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

Is user interaction required?

What is the impact if exploitation succeeds?