CVE Field Guide
About Us
CVE-2026-25293
PUBLISHED
Incorrect authorization in PLC FW
Assigner:
qualcomm
Reserved:
02.02.2026
Published:
04.05.2026
Updated:
05.05.2026
Buffer overflow due to incorrect authorization in PLC FW
Metrics
CVSS 3.1
CVSS Vector:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS Score:
9.6
CVSS score
9.6
Attack Vector
Adjacent Network
Scope
Changed
Attack Complexity
Low
Confidentiality Impact
High
Privileges Required
None
Integrity Impact
High
User Interaction
None
Availability Impact
High
CVSS 3.1
Product Status
Vendor
Qualcomm, Inc.
Product
Snapdragon
Versions
Default:
unaffected
Version QCA7005 is affected
References
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html
Problem Types
CWE-863
CWE