SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-20503

MEDIUM · CVSS 5.3 EPSS 0.19% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-07 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A vulnerability in Modem could allow an attacker to induce a remote denial of service by exploiting a missing bounds check, potentially causing a system crash when a user equipment (UE) connects to a rogue base station. No user interaction is required for exploitation, making this a significant risk for devices relying on Modem. Organizations using affected products should prioritize addressing this issue to prevent potential service disruptions.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-20503
Severity
MEDIUM
CVSS
5.3
EPSS
0.19%

Original NVD Description

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01371002; Issue ID: MSV-9020.

Related CVEs

Other vulnerabilities affecting the same vendor(s)