CVE-2026-25255: Qualcomm Package Manager

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Exposed dangerous function lead to privilege escalation via gRPC server.

Affected products

• Qualcomm Package Manager: version 3.0.125.4 only; version 3.0.126.7 only; version 3.0.127.2 only
• Qualcomm Software Center: version 1.17.1 only; version 1.19.1 only; version 1.21.0 only

Published 2026-09-22. Last modified 2026-10-06.