CVE-2026-95622
No scorePublic exploit
Reachable assertion in Cell Broadcast encoding parse causes denial of service
What each source reports
OSVUBUNTU-CVE-2026-95622No score
Reachable assertion in Cell Broadcast encoding parse causes denial of service
- Record
UBUNTU-CVE-2026-95622- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
modemmanagerDebian:13 | All versions, plus listed versions 1.24.0-11.24.0-1+deb13u11.24.2-11.24.2-21.25.1-11.25.95-1 | None known |
modemmanagerDebian:14 | All versions, plus listed versions 1.24.0-11.24.2-11.24.2-21.25.1-11.25.95-1 | None known |
modemmanagerUbuntu:16.04:LTS | All versions, plus listed versions 1.4.10-1ubuntu21.4.12-1ubuntu11.6.4-1ubuntu0.16.04.1 | None known |
modemmanagerUbuntu:18.04:LTS | All versions, plus listed versions 1.6.8-11.6.8-21.6.8-2ubuntu11.10.0-1~ubuntu18.04.2 | None known |
modemmanagerUbuntu:20.04:LTS | All versions, plus listed versions 1.10.4-0.11.12.6-11.12.8-11.16.6-2~20.041.16.6-2~20.04.11.18.6-1~ubuntu20.04.1 | None known |
modemmanagerUbuntu:22.04:LTS | All versions, plus listed versions 1.16.6-21.16.6-2ubuntu11.18.2-0ubuntu11.18.4-11.18.6-1 Show 4 moreShow less1.20.0-1~ubuntu22.04.11.20.0-1~ubuntu22.04.21.20.0-1~ubuntu22.04.31.20.0-1~ubuntu22.04.4 | None known |
modemmanagerUbuntu:24.04:LTS | All versions, plus listed versions 1.20.6-1ubuntu11.20.6-1ubuntu21.22.0-2ubuntu21.22.0-31.23.4-0ubuntu11.23.4-0ubuntu2 | None known |
modemmanagerUbuntu:26.10 | All versions, plus listed versions 1.25.95-1ubuntu1 | None known |
modemmanagerUbuntu:26.04:LTS | All versions, plus listed versions 1.24.2-0ubuntu11.24.2-1fakesync11.24.2-2fakesync11.25.95-1ubuntu1 | None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | 0xSemizzz/CVE-2026-95622 | 2026-10-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-95622 is a vulnerability with no CVSS score yet in modemmanager, published September 28, 2026. Public exploit code exists. No source names a fixed version.