Every CVE Search/ Get API key

CVE-2026-24079

Missing Authentication for Critical Function in Data Modem

8.1 High

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

Attack profile

How easy it is to exploit

Attack vector
Adjacent network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
None

Exploit likelihood

0.21%Unchanged since Aug 5, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.1

Missing Authentication for Critical Function in Data Modem

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

Record
CVE-2026-24079
CVSS 3.1
8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-306
Updated
2026-11-02
EUVDEUVD-2026-52732 8.1

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

Record
EUVD-2026-52732
CVSS 3.1
8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-fqrr-5g6m-c8hx 8.1

Cryptographic Issue while processing registration requests with malformed or missing...

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

Record
GHSA-fqrr-5g6m-c8hx
CVSS 3.1
8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-306
Updated
2026-11-02
NVD 8.1

Cryptographic Issue while processing registration requests with malformed or missing authentication parameters.

Record
CVE-2026-24079
CVSS 3.1
8.1 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-306
Updated
2026-11-02

Affected products

Show 132 moreShow less

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-24079 is a high vulnerability (CVSS 8.1) in Qualcomm Ar8035 Firmware, published August 4, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. No source names a fixed version.

References

MoveEnter Open