CVE-2026-20974
Medium · 4.6CVSS
4.6
EPSS
0.2%
Published
Jan 9, 2026
CISA due date
—
The record
Improper input validation in data related to network restrictions prior to SMR Jan-2026 Release 1 allows physical attackers to bypass Carrier Relock.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|