Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 12 products
CVE-2026-20495 Permission Bypass in Bluetooth Driver Leading to Local Privilege Escalation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20495
Post summary
The snippet references CVE-2026-20495 as a local privilege escalation via a Bluetooth driver permission bypass, but provides no PoC, exploit, patch, or evidence of active exploitation.
12 of 12 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | mediatek | mt7902 | - | - | - |
| OS | mediatek | mt7902_firmware | - | - | - |
| HW | mediatek | mt7920 | - | - | - |
| OS | mediatek | mt7920_firmware | - | - | - |
| HW | mediatek | mt7921 | - | - | - |
| OS | mediatek | mt7921_firmware | - | - | - |
| HW | mediatek | mt7922 | - | - | - |
| OS | mediatek | mt7922_firmware | - | - | - |
| HW | mediatek | mt7925 | - | - | - |
| OS | mediatek | mt7925_firmware | - | - | - |
| HW | mediatek | mt7927 | - | - | - |
| OS | mediatek | mt7927_firmware | - | - | - |