CVE-2026-24078 MEDIUM

CVE-2026-24078: Exposure of Private Personal Information to an Unauthorized Actor in Data Modem

Vendor Qualcomm, Inc.
Product Snapdragon
Weakness CWE-359
Published August 4, 2026
Last update August 4, 2026
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Information Disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling.

Key dates

02Disclosure timeline

August 4, 2026 CVE published

Related vulnerabilities

04Related CVE

CVE-2025-12536 SureForms <= 1.13.1 - Missing Authorization to Unauthenticated Sensitive Information Exposure CVE-2024-11396 Event monster <= 1.4.3 - Information Exposure Via Visitors List Export CVE-2023-6630 Contact Form 7 – Dynamic Text Extension <= 4.1.0 - Insecure Direct Object Reference CVE-2025-0969 Brizy – Page Builder <= 2.7.16 - Authenticated (Contributor+) Sensitive Information Exposure via get_users Function CVE-2023-7014 Author Box, Guest Author and Co-Authors for Your Posts – Molongui <= 4.7.4 - Information Exposure via ma_debug