CVE-2026-25275: Qualcomm 5g Fixed Wireless Access Platform Firmware

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

Affected products

• Qualcomm 5g Fixed Wireless Access Platform Firmware: affected versions not specified
• Qualcomm AQT1000 Firmware: affected versions not specified
• Qualcomm AR8031 Firmware: affected versions not specified
• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm c110100 Firmware: affected versions not specified
• Qualcomm Cologne Firmware: affected versions not specified
• Qualcomm Congo Firmware: affected versions not specified
• Qualcomm CQ2390M Firmware: affected versions not specified
• Qualcomm CQ2390S Firmware: affected versions not specified
• Qualcomm CQ7790 Firmware: affected versions not specified
• Qualcomm CQ7790M Firmware: affected versions not specified
• Qualcomm CQ8725S Firmware: affected versions not specified
• Qualcomm CQ8750M Firmware: affected versions not specified
• Qualcomm CQ8845S Firmware: affected versions not specified
• Qualcomm CSR8811 Firmware: affected versions not specified
• Qualcomm CSRA6620 Firmware: affected versions not specified
• Qualcomm CSRA6640 Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm Fastconnect 6200 Firmware: affected versions not specified
• Qualcomm Fastconnect 6700 Firmware: affected versions not specified
• Qualcomm Fastconnect 6800 Firmware: affected versions not specified
• Qualcomm Fastconnect 6900 Firmware: affected versions not specified
• Qualcomm Fastconnect 7800 Firmware: affected versions not specified
• Qualcomm Fastconnect 8800 Mobile Connectivity System Firmware: affected versions not specified
• Qualcomm Flight RB5 5g Platform Firmware: affected versions not specified
• and 351 more

Published 2026-09-17. Last modified 2026-09-22.