CVE-2026-20578

The record

In Modem, there is a possible information disclosure due to side channel information disclosure. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01879164; Issue ID: MSV-9846.

Affected packages

Related vulnerabilities

• CVE-2026-89177 WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of… CWE-757
• CVE-2026-59293 Unless the application explicitly raises smbMinVersion, the jCIFS client will negotiate… CWE-757
• CVE-2026-72889 Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature… CWE-757
• CVE-2026-72887 Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently… CWE-757
• CVE-2026-18691 An issue in MongoDB Server's intra-cluster connection setup could allow a party with… CWE-757
• CVE-2026-55953 The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher… CWE-757
• CVE-2026-4942 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted… CWE-757
• CVE-2026-53712 SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of… CWE-757