CVE-2026-66086: Unisoc Shanghai Technologies Co., Ltd Modem

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of service with no additional execution privileges needed.

Affected products

Published 2026-10-12. Last modified 2026-10-16.