CVE-2026-0154

None

CVSS

—

EPSS

0.2%

Published

Jun 16, 2026

CISA due date

—

The record

In Modem, there is a possible way to trigger a modem crash during a SIP REFER request due to memory corruption. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Affected packages

Ecosystem	Package	Introduced	Fixed