CVE-2026-21554

HighCVSS 7.5/10Last modified Oct 23, 2026

Description

In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Unisoc (Shanghai) Technologies Co., Ltd.UDX710Yocto

References

Timeline

Published
Aug 3, 2026
Last modified
Oct 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-215557.5In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privilegesCVE-2026-21564.8A weakness has been identified in code-projects Online Student Management System 1.0. The impacted element is an unknown function of the filCVE-2026-215697.9This High severity XXE (XML External Entity Injection) vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. ThCVE-2026-21577.2A security vulnerability has been detected in D-Link DIR-823X 250416. This affects the function sub_4175CC of the file /goform/set_static_roCVE-2026-215708.8This High severity RCE (Remote Code Execution)  vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0CVE-2026-215718.8This Critical severity OS Command Injection vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0,CVE-2026-215758.0This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for WindoCVE-2026-215776.5This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0CVE-2026-215797.5This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2CVE-2026-21589.8A vulnerability was detected in code-projects Student Web Portal 1.0. This impacts an unknown function of the file /check_user.php. PerformiCVE-2026-215809.3This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.CVE-2026-215828.8This High severity BASM (Broken Authentication & Session Management) vulnerability known as CVE-2026-21582 was introduced in version 7.2.1 o
CVE-2026-21554: High severity, CVSS 7.5 | Vulnix