CVE-2026-20402CWE-787

In Modem, there is a possible system crash due to improper input validation

Medium · published February 2, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
13.8
In the wild
Unconfirmed
What it is

⚠️ A simple rogue base station can crash your system without much fuss! Just one improperly validated input is all it takes to trigger this remote denial of service in Modem. 🔥 Think of a party where someone sneaks in a fake RSVP. Everyone’s enjoying themselves, but suddenly the host has to shut the party down because the guest list was never properly verified. That’s what this vulnerability does to your system — it can bring everything to a halt! An attacker can cause a system crash remotely if a user connects to their rogue base station. This means without any user interaction, your system could be taken out of commission, leaving users frustrated and your services unavailable.

Put simply

Think of a party where someone sneaks in a fake RSVP. Everyone’s enjoying themselves, but suddenly the host has to shut the party down because the guest list was never properly verified. That’s what this vulnerability does to your system — it can bring everything to a halt! CVE-2026-20402 is a vulnerability in Modem stemming from improper input validation, allowing for a remote denial of service when a user connects to an attacker-controlled base station, with no additional execution privileges required.

What to do

An attacker can cause a system crash remotely if a user connects to their rogue base station. This means without any user interaction, your system could be taken out of commission, leaving users frustrated and your services unavailable. To mitigate this risk, apply Patch ID MOLY00693083 immediately. Additionally, review your input validation processes and ensure that connections to base stations are properly authenticated. Keeping systems updated is key! You've got this! Follow these steps to reinforce your defenses and keep your systems running smoothly. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00236 · 13.8th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-02-02T08:14Z
EPSS history
Timeline
  • 02 FEB 08:14Z
    In Modem, there is a possible system crash due to improper input validation
    cvelistv5