Live › vulnerability › CVE-2026-20599
A missing permission check in the modem component can let code that already runs with System privilege gain further privilege. The sources describe no remote path and no user interaction is needed once an attacker already holds System access.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 03:31 UTC. All times on this page are UTC.
The flaw is in the modem component of a device, so it applies to the phone or device model covered by the vendor's bulletin. The sources do not name affected models or versions. An attacker must already hold System privilege on the device, so an ordinary app without that access is not the target.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01790985; Issue ID: MSV-8148.
This page as .md · .json · in your agent: get_signal("CVE-2026-20599")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.