CVE-2026-20430Disclosure(mediatek / mt6890)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151.

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mt6890
  • mt7915
  • mt7916
  • mt7981

Threat summary

  • 8 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 7 signals
  • Disclosure: 6 classified signals
  • General: 2 classified signals
  • Peaked 4d ago at 4 mentions (2026-03-02); latest day: 1
  • 8 total mentions across 5 days

Affected systems

Products
mt6890mt7915mt7916mt7981mt7986openwrtsoftware_development_kit

4 versions affected across 7 products

Deep dive

Activity timeline8 mentions / 5d
01234Mentions · 2026-03-02: 4Mentions · 2026-03-04: 1Mentions · 2026-03-05: 1Mentions · 2026-03-06: 1Mentions · 2026-03-07: 1Technical Details · 2026-03-02: 4Technical Details · 2026-03-05: 1Technical Details · 2026-03-06: 1Technical Details · 2026-03-07: 103-0203-0403-0503-0603-07
Signal classification2 categories
Disclosure
675.0%
General
225.0%
Referenced assets7 URLs
Classification over time
DateTotalLabels
2026-03-024
Disclosure4
2026-03-041
Disclosure1
2026-03-051
General1
2026-03-061
Disclosure1
2026-03-071
General1
Full discourse8 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-20430 Out-of-Bounds Write in WLAN Access Point Firmware Enables Privilege Esca... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20430 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    A new CVE (CVE-2026-20430) has been announced, describing an out-of-bounds write in WLAN access point firmware that could lead to privilege escalation. No PoC, exploit, patch, or active exploitation details are provided.

    0001158
    4.0K followersView on X
  • CRAC Learning - Tech@cracbot
    General

    CVE-2026-20430 (CVSS:8.8, HIGH) is Analyzed. In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (prox..https://nvd.nist.gov/vuln/detail/CVE-2026-20430 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The tweet reports on CVE-2026-20430, noting a potential out-of-bounds write in WLAN AP firmware and its CVSS score, but provides no PoC, exploit code, active exploitation evidence, or remediation details.

    0000028
    173 followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-20430 (CVSS:8.8, HIGH) is Analyzed. In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (prox..https://nvd.nist.gov/vuln/detail/CVE-2026-20430 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces the discovery of CVE‑2026‑20430, highlighting a high‑severity out‑of‑bounds write flaw in WLAN AP firmware.

    0000022
    173 followersView on X
  • CRAC Learning - Tech@cracbot
    General

    CVE-2026-20430 (CVSS:8.8, HIGH) is Analyzed. In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (prox..https://nvd.nist.gov/vuln/detail/CVE-2026-20430 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post briefly analyzes CVE‑2026‑20430, noting an out‑of‑bounds write in WLAN AP firmware that could enable remote exploitation, with reference to the NVD entry.

    0000028
    173 followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos MediaTek ❗ CVE-2026-20434 ❗ CVE-2026-20430 ❗ CVE-2026-20423 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-mediatek-6/ https://t.co/e3SFoQSKMx

    Post summary

    The tweet announces three MediaTek CVEs and links to a source for more details, but it contains no exploit code, PoC, patch information, or evidence of active attacks.

    00000102
    6.6K followersView on X
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-20430 - High In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution pri... https://www.thehackerwire.com/vulnerability/CVE-2026-20430/ https://t.co/BsaThqBSIA

    Post summary

    The post announces CVE‑2026‑20430, describing an out‑of‑bounds write in WLAN AP firmware that could allow privilege escalation, but no PoC, exploit, or patch is mentioned.

    0000040
    122 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-20430 In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no… https://www.cve.org/CVERecord?id=CVE-2026-20430 ----- Traducción: CVE-2026-20430 En … http://infoflow.cloud`

    Post summary

    A new CVE (CVE-2026-20430) is disclosed, describing an out‑of‑bounds write in WLAN AP firmware that could allow privilege escalation.

    0000029
    55 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-20430 In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no… https://www.cve.org/CVERecord?id=CVE-2026-20430

    Post summary

    CVE-2026-20430 reveals a possible out-of-bounds write in WLAN AP firmware that could enable remote privilege escalation.

    00000241
    56.6K followersView on X
CPE platform detail9 entries

9 of 9 entries

PartVendorProductVersionTarget SWTarget HW
HWmediatekmt6890---
HWmediatekmt7915---
HWmediatekmt7916---
HWmediatekmt7981---
HWmediatekmt7986---
Appmediateksoftware_development_kit---
OSopenwrtopenwrt19.07.0--
OSopenwrtopenwrt21.02.0--
OSopenwrtopenwrt23.05.0--

Explore more