CVE-2026-82549CWE-345CWE-354

CVE-2026-82549

High · published August 30, 2026

CVSS v3.1
8.3
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might be used.

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P
EPSS
0.00186 · 8.3th percentile
Weaknesses
CWE-345 · Insufficient Verification of Data Authenticity; CWE-354 · Improper Validation of Integrity Check Value
Published
2026-08-30T20:16Z
References (6)
https://vuldb.com/cve/CVE-2026-82549 · [email protected]https://vuldb.com/submit/891574 · [email protected]https://vuldb.com/vuln/397065 · [email protected]https://vuldb.com/vuln/397065/cti · [email protected]https://www.linuxfoundation.org/ · [email protected]https://github.com/magma/magma/issues/16024 · [email protected]
EPSS history
Timeline
  • 01 SEP 03:32Z
    EPSS moved — → 0%
    epss
  • 30 AUG 15:30Z
    Linux Foundation Magma SecurityModeComplete integrity check
    cvelistv5