CVE-2026-35495

MediumCVSS 6.5/10Last modified Nov 10, 2026

Description

In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-754

Affected software

VendorProductVersions
Samsung SemiconductorExynos 1080< October 2026
Samsung SemiconductorExynos 9110< October 2026
Samsung SemiconductorExynos Modem 5123< October 2026
Samsung SemiconductorExynos Modem 5300< October 2026
Samsung SemiconductorExynos Modem 5400< October 2026

References

Timeline

Published
Nov 5, 2026
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-354965.1A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-lCVE-2026-354999.1An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250CVE-2026-35505.3The RockPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0.17. This is due to missiCVE-2026-355008.6Stack-based buffer overflow in the UEFI firmware for the Intel(R) Slim Bootloader within Ring 0: Bare Metal OS may allow an escalation of prCVE-2026-355013.7When NLnet Labs Unbound 1.0.1 up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchorCVE-2026-355025.3Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow anCVE-2026-355039.8A vulnerability in SenseLive X3050’s web management interface allows authentication logic to be performed entirely on the client side, relyiCVE-2026-355045.5PowerSYSTEM Center email notification service is affected by a CRLF injection vulnerability when using SMTPS communication.CVE-2026-355057.5An unauthenticated remote attacker can repeatedly send crafted connection requests to leak memory. In single-process deployments the memory CVE-2026-355068.6ELECOM wireless LAN access point devices contain an OS command injection vulnerability in processing of ping_ip_addr parameter. If processinCVE-2026-355076.5Shynet before 0.14.0 allows Host header injection in the password reset flow.CVE-2026-355086.1Shynet before 0.14.0 allows XSS in urldisplay and iconify template filters,
CVE-2026-35495: Medium severity, CVSS 6.5 | Vulnix