CVE-2026-20408Disclosure(mediatek / mt6890)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00461651; Issue ID: MSV-4758.

mediatek CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://corp.mediatek.com/product-security-bulletin/February-2026

Weakness type (CWE)

CWE-122CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

mt6890
mt7615
mt7915
mt7916

Threat summary

4 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 1d ago at 3 mentions (2026-02-02); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

mediatek openwrt

Products

mt6890mt7615mt7915mt7916mt7981mt7986openwrtsoftware_development_kit

4 versions affected across 8 products

Deep dive

Activity timeline4 mentions / 2d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-02	3	Disclosure3
2026-02-07	1	Disclosure1

Full discourse4 posts

The Hacker Wire@TheHackerWire249d
Disclosure
🟠 CVE-2026-20408 - High In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges n... https://www.thehackerwire.com/vulnerability/CVE-2026-20408/ https://t.co/94Z9UyFnTv
Post summary
The post announces CVE-2026-20408, detailing a heap buffer overflow in WLAN that could lead to remote privilege escalation, but no PoC, exploit, patch, or active exploitation info is provided.
0001073
113 followersView on X
CRAC Learning - Tech@cracbot245d
Disclosure
CVE-2026-20408 (CVSS:8.8, HIGH) is Analyzed. In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adja..https://nvd.nist.gov/vuln/detail/CVE-2026-20408 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet highlights CVE-2026-20408, noting a heap buffer overflow in WLAN that could enable remote exploitation, but provides no PoC, exploit, or patch details.
0000059
171 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds250d
Disclosure
CVE-2026-20408 In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. ... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20408
Post summary
The passage provides a concise technical disclosure of CVE‑2026‑20408, detailing an out‑of‑bounds heap buffer overflow in WLAN that can result in privilege escalation, but does not mention PoC, exploits, active use, patches, or false positives.
0000089
4.0K followersView on X
CVE@CVEnew250d
Disclosure
CVE-2026-20408 In wlan, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no addition… https://www.cve.org/CVERecord?id=CVE-2026-20408
Post summary
The message announces the new vulnerability CVE‑2026‑20408, describing a heap buffer overflow in wlan that could lead to remote privilege escalation.
00000173
56.5K followersView on X

CPE platform detail10 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

10 of 10 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	mediatek	mt6890	-	-	-
HW	mediatek	mt7615	-	-	-
HW	mediatek	mt7915	-	-	-
HW	mediatek	mt7916	-	-	-
HW	mediatek	mt7981	-	-	-
HW	mediatek	mt7986	-	-	-
App	mediatek	software_development_kit	-	-	-
OS	openwrt	openwrt	19.07.0	-	-
OS	openwrt	openwrt	21.02.0	-	-
OS	openwrt	openwrt	23.05.0	-	-

Explore more

Back to dashboard mediatek CVEs openwrt CVEs mt6890 vulnerabilities

What researchers are saying

CVE-2026-20408

The Hacker Wire@TheHackerWireDisclosure

The post announces CVE-2026-20408, detailing a heap buffer overflow in WLAN that could lead to remote privilege escalation, but no PoC, exploit, patch, or active exploitation info is provided.

CRAC Learning - Tech@cracbotDisclosure

The tweet highlights CVE-2026-20408, noting a heap buffer overflow in WLAN that could enable remote exploitation, but provides no PoC, exploit, or patch details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The passage provides a concise technical disclosure of CVE‑2026‑20408, detailing an out‑of‑bounds heap buffer overflow in WLAN that can result in privilege escalation, but does not mention PoC, exploits, active use, patches, or false positives.

CVE@CVEnewDisclosure

The message announces the new vulnerability CVE‑2026‑20408, describing a heap buffer overflow in wlan that could lead to remote privilege escalation.