CVE-2026-21383: Qualcomm Fastconnect 6900 Firmware

High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days.

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

Affected products

• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Lemans Au Lgit Firmware: affected versions not specified
• Qualcomm Lemansau Firmware: affected versions not specified
• Qualcomm Pandeiro Firmware: affected versions not specified
• Qualcomm QAM8255P Firmware: affected versions not specified
• Qualcomm QAM8397P Firmware: affected versions not specified
• Qualcomm QAM8797P Firmware: affected versions not specified
• Qualcomm QAMSRV1H Firmware: affected versions not specified
• Qualcomm QAMSRV1M Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCA6698AQ Firmware: affected versions not specified
• Qualcomm QCA6797AQ Firmware: affected versions not specified
• Qualcomm QCA8695AU Firmware: affected versions not specified
• Qualcomm QDU1000 Firmware: affected versions not specified
• Qualcomm QDU1110 Firmware: affected versions not specified
• Qualcomm QDU1210 Firmware: affected versions not specified
• Qualcomm QDX1010 Firmware: affected versions not specified
• Qualcomm QDX1011 Firmware: affected versions not specified
• Qualcomm QLN1083BD Firmware: affected versions not specified
• Qualcomm QLN1086BD Firmware: affected versions not specified
• Qualcomm QPA1083BD Firmware: affected versions not specified
• Qualcomm QPA1086BD Firmware: affected versions not specified
• Qualcomm Qualcomm Dragonwing x100 Accelerator Card Firmware: affected versions not specified
• and 28 more

Published 2026-07-06. Last modified 2026-07-08.