CVE-2026-48186

CriticalCVSS 9.1/10Last modified Nov 10, 2026

Description

Improper handling of messages before AS security activation can cause unexpected behavior

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-754

Affected software

VendorProductVersions
Samsung SemiconductorExynos 1280< October 2026
Samsung SemiconductorExynos 2200< October 2026
Samsung SemiconductorExynos 1330< October 2026
Samsung SemiconductorExynos 1380< October 2026
Samsung SemiconductorExynos 1480< October 2026
Samsung SemiconductorExynos 2400< October 2026
Samsung SemiconductorExynos 1580< October 2026
Samsung SemiconductorExynos 2500< October 2026
Samsung SemiconductorExynos 1680< October 2026
Samsung SemiconductorExynos W1000< October 2026
Samsung SemiconductorExynos Modem 5300< October 2026
Samsung SemiconductorExynos Modem 5400< October 2026
Samsung SemiconductorExynos Modem 5410< October 2026

References

Timeline

Published
Nov 5, 2026
Last modified
Nov 10, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-481875.7An uncontrolled allocation of resources without limits or throttling in the e-mail handling in OTRS allows excessive allocation which may leCVE-2026-481889.1An improper Input Validation vulnerability in OTRS or ((OTRS)) Community Edition database layer module allows an unauthenticated SQL injectiCVE-2026-481895.7An improper Input Validation vulnerability in OTRS Customer Backend module allows to access customer information which are restricted to othCVE-2026-48196.5In Search Guard FLX versions from 1.0.0 up to 4.0.1, the audit logging feature might log user credentials from users logging into Kibana.CVE-2026-481903.5An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query theCVE-2026-481913.5An incorrect handling of permissions in STORM powered by OTRS and in OTRS (2026.x and above) Document Search Article Meta Filters modules alCVE-2026-481925.4A vulnerability has been identified in Mendix Studio Pro 10.11 (All versions), Mendix Studio Pro 10.12 (All versions), Mendix Studio Pro 10.CVE-2026-481938.1Unauthenticated Local File Inclusion in Uminex <= 1.0.9 versions.CVE-2026-481948.1Unauthenticated Local File Inclusion in DukaMarket <= 1.3.0 versions.CVE-2026-481956.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poster pdf-poster allows CVE-2026-481966.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaliforms Kali Forms kali-forms allowsCVE-2026-481977.2Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalati
CVE-2026-48186: Critical severity, CVSS 9.1 | Vulnix