VulnSocial

CVE-2026-20448Disclosure(mediatek / mt6765)

LOWCVSS 6.7 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10708513; Issue ID: MSV-6281.

mediatek CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-280

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • mt6765
  • mt6765_firmware
  • mt6768
  • mt6768_firmware

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
mediatek
Products
mt6765mt6765_firmwaremt6768mt6768_firmwaremt6789mt6789_firmwaremt6877mt6877_firmwaremt6897mt6897_firmware

1 version affected across 44 products

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-05-04: 3Technical Details · 2026-05-04: 205-04
Signal classification1 categories
Disclosure
3100.0%
Referenced assets4 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-20448 Local Privilege Escalation in Geniezone Due to Missing Permission... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20448 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1

    Post summary

    The message announces CVE‑2026‑20448, a local privilege escalation flaw in Geniezone caused by a missing permission, but provides no PoC, exploit code, or remediation details.

    0000056
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-20448 In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has… https://www.cve.org/CVERecord?id=CVE-2026-20448 ----- Traducción: CVE-2026-20448 En … http://infoflow.cloud`

    Post summary

    A potential local privilege escalation vulnerability (CVE-2026-20448) has been disclosed for geniezone, stemming from a missing permission check.

    0000029
    75 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-20448 In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has… https://www.cve.org/CVERecord?id=CVE-2026-20448

    Post summary

    CVE‑2026‑20448 is identified as a privilege‑escalation vulnerability in GenieZone caused by a missing permission check, with no PoC, exploit code, active attack reports, or patch information mentioned.

    00000145
    57.4K followersView on X
CPE platform detail44 entries

44 of 44 entries

PartVendorProductVersionTarget SWTarget HW
HWmediatekmt6765---
OSmediatekmt6765_firmware---
HWmediatekmt6768---
OSmediatekmt6768_firmware---
HWmediatekmt6789---
OSmediatekmt6789_firmware---
HWmediatekmt6877---
OSmediatekmt6877_firmware---
HWmediatekmt6897---
OSmediatekmt6897_firmware---
HWmediatekmt6899---
OSmediatekmt6899_firmware---
HWmediatekmt6989---
OSmediatekmt6989_firmware---
HWmediatekmt6991---
OSmediatekmt6991_firmware---
HWmediatekmt6993---
OSmediatekmt6993_firmware---
HWmediatekmt8367---
OSmediatekmt8367_firmware---
HWmediatekmt8766---
OSmediatekmt8766_firmware---
HWmediatekmt8768---
OSmediatekmt8768_firmware---
HWmediatekmt8775---
OSmediatekmt8775_firmware---
HWmediatekmt8781---
OSmediatekmt8781_firmware---
HWmediatekmt8786---
OSmediatekmt8786_firmware---
HWmediatekmt8788e---
OSmediatekmt8788e_firmware---
HWmediatekmt8791t---
OSmediatekmt8791t_firmware---
HWmediatekmt8792---
OSmediatekmt8792_firmware---
HWmediatekmt8793---
OSmediatekmt8793_firmware---
HWmediatekmt8796---
OSmediatekmt8796_firmware---
HWmediatekmt8893---
OSmediatekmt8893_firmware---
HWmediatekmt8910---
OSmediatekmt8910_firmware---

Explore more

Back to dashboardmediatek CVEsmt6765 vulnerabilities