VDB
CVE-2026-66086
CVE-2026-66086
PUBLISHED
CVSS 8.3 HIGH
Stack-based Buffer Overflow in Modem
Reported by unisoc · Published October 12, 2026
In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.
Risk scores
CVSS 3.1
8.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Unisoc (Shanghai) Technologies Co., Ltd. | Modem | T8100, T9100, UDX710 |
| Unisoc (Shanghai) Technologies Co., Ltd. | Modem | * |
Timeline
- Oct 12, 2026 EPSS Score (9 in total, the first dated here)
- Oct 12, 2026 CVE Published
- Oct 15, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2026-66086
vulnetix vdb fixes CVE-2026-66086Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2026-66086/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart