Unisoc Shanghai Technologies Co., Ltd Modem vulnerabilities

2 CVEs affecting Unisoc Shanghai Technologies Co., Ltd Modem, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-66086, published 2026-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-66086, published 2026-10-12. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. In the modem OTA stack, there is a possible stack-based buffer overflow due to improper validation of scheduling information in SIB1 messages. This could lead to remote code execution or denial of…
CVE-2026-66085, published 2026-10-12. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. In modem, there is a possible information disclosure due to missing filtering of sensitive data in crash dumps. This could lead to local information disclosure with no additional execution privileges…