9.8

CVE-2026-25293

Medienbericht

Incorrect authorization in PLC FW

Buffer overflow due to incorrect authorization in PLC FW
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qualcomm ≫ Qca7005 Firmware Version-
   Qualcomm ≫ Qca7005 Version-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.18% 0.078
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
product-security@qualcomm.com 9.6 2.8 6
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
18.05.2026 17:45
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html
Vendor Advisory