CVE-2026-24078: Qualcomm 5g Fixed Wireless Access Platform Firmware

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

Affected products

• Qualcomm 5g Fixed Wireless Access Platform Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm FSM20055 Firmware: affected versions not specified
• Qualcomm FSM200 Platform Firmware: affected versions not specified
• Qualcomm Fwa Gen 3 Ultra Firmware: affected versions not specified
• Qualcomm g1 Gen 1 Firmware: affected versions not specified
• Qualcomm Milos Firmware: affected versions not specified
• Qualcomm Netrani Firmware: affected versions not specified
• Qualcomm Orne Firmware: affected versions not specified
• Qualcomm PALAWAN25 Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6584AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6678AQ Firmware: affected versions not specified
• Qualcomm QCA6688AQ Firmware: affected versions not specified
• and 122 more

Published 2026-08-04. Last modified 2026-08-06.