What’s Vulnerable › Vulnerabilities
CVE-2026-66086: Stack-based Buffer Overflow in Modem
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-12 · updated 2026-10-16
- Weakness: CWE-121
Description
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
Affected products
- Unisoc (Shanghai) Technologies Co., Ltd. Modem: T8100, T9100, UDX710
References
Get alerted when CVE-2026-66086 or the next vulnerability affects your stack