What’s Vulnerable › Vulnerabilities
CVE-2026-24088: Missing Authentication for Critical Function in Boot
- Severity: high (CVSS 8.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-01 · updated 2026-07-22
- Weakness: CWE-306
Description
Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.
Affected products
- Qualcomm Ar9380 Firmware: all versions
- Qualcomm Csr8811 Firmware: all versions
- Qualcomm Fastconnect 6200 Firmware: all versions
- Qualcomm Fastconnect 6700 Firmware: all versions
- Qualcomm Fastconnect 6900 Firmware: all versions
- Qualcomm Fastconnect 7800 Firmware: all versions
- Qualcomm G1 Gen 1 Firmware: all versions
- Qualcomm G2 Gen 1 Firmware: all versions
- Qualcomm G3X Gen 2 Firmware: all versions
- Qualcomm Immersive Home 214 Platform Firmware: all versions
- Qualcomm Immersive Home 216 Platform Firmware: all versions
- Qualcomm Immersive Home 316 Platform Firmware: all versions
- Qualcomm Immersive Home 318 Platform Firmware: all versions
- Qualcomm Ipq4018 Firmware: all versions
- Qualcomm Ipq4019 Firmware: all versions
- Qualcomm Ipq4028 Firmware: all versions
- Qualcomm Ipq4029 Firmware: all versions
- Qualcomm Ipq5010 Firmware: all versions
- Qualcomm Ipq6010 Firmware: all versions
- Qualcomm Ipq6018 Firmware: all versions
- Qualcomm Ipq8064 Firmware: all versions
- Qualcomm Ipq8065 Firmware: all versions
- Qualcomm Ipq8068 Firmware: all versions
- Qualcomm Ipq8070 Firmware: all versions
- Qualcomm Ipq8076 Firmware: all versions
- Qualcomm Ipq8078 Firmware: all versions
- Qualcomm Iq-9075 Firmware: all versions
- Qualcomm Kalpeni Firmware: all versions
- Qualcomm Lemans Au Lgit Firmware: all versions
- Qualcomm Lemansau Firmware: all versions
References
Get alerted when CVE-2026-24088 or the next vulnerability affects your stack