#NØØT_Security_Alerts 🚨 #ALERT — UNISOC MODEM VULNERABILITY COULD ENABLE REMOTE CODE EXECUTION VIA CELLULAR SIGNALING October 12, 2026 DISCLOSED BY: Unisoc Security Response Team PRODUCT: Unisoc Cellular Modems CVE: CVE-2026-66086 SEVERITY: High — Vendor CVSS 8.3 AFFECTED PRODUCTS: T8100, T9100 and UDX710. IMPACT: A stack-based buffer overflow in the modem OTA stack results from improper validation of scheduling information in cellular SIB1 messages. Successful exploitation could enable remote code execution or denial of service without additional execution privileges. EXPOSURE: Affected cellular modems receiving maliciously crafted SIB1 signaling. This is a cellular signaling attack surface, not an ordinary internet-facing API vulnerability. EXPLOITATION STATUS: VENDOR-CONFIRMED VULNERABILITY. No verified public working exploit or malicious in-the-wild exploitation identified. Forensic triage: Inspect available modem diagnostic traces, abnormal SIB1 signaling, unexpected baseband crashes and repeated modem resets. No confirmed campaign-specific IOCs have been published. URGENT ACTION: Identify devices using affected Unisoc modems. Contact device manufacturers or mobile operators for security firmware updates and remediation guidance. No specific fixed firmware version was provided in the published CVE record. SOURCE: https://www.unisoc.com/en/support/product-security-bulletin/2109454821805424641 CVE RECORD: https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/66xxx/CVE-2026-66086.json CONFIDENCE: HIGH — Unisoc-authored CVE record confirms the vulnerability and affected modem models. Practical exploitation and active attacks remain unverified. #CyberSecurity #ThreatIntel #Unisoc #MobileSecurity #BasebandSecurity #RCE
