CVE-2026-68591

Published Nov 2, 2026 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Mediatek mt2737
Mediatek mt2737 Firmware
Mediatek mt6813
Mediatek mt6813 Firmware
Mediatek mt6815
Mediatek mt6815 Firmware
Mediatek mt6835
Mediatek mt6835 Firmware
Mediatek mt6878
Mediatek mt6878 Firmware
Mediatek mt6879
Mediatek mt6879 Firmware
Mediatek mt6886
Mediatek mt6886 Firmware
Mediatek mt6895
Mediatek mt6895 Firmware
Mediatek mt6896
Mediatek mt6896 Firmware
Mediatek mt6897
Mediatek mt6897 Firmware
Mediatek mt6980
Mediatek mt6980 Firmware
Mediatek mt6983
Mediatek mt6983 Firmware
Mediatek mt6985
Mediatek mt6985 Firmware
Mediatek mt6990
Mediatek mt6990 Firmware
Mediatek mt8676
Mediatek mt8676 Firmware
Mediatek mt8755
Mediatek mt8755 Firmware
Mediatek mt8775
Mediatek mt8775 Firmware
Mediatek mt8792
Mediatek mt8792 Firmware
Mediatek mt8798
Mediatek mt8798 Firmware
Mediatek mt8863
Mediatek mt8863 Firmware
Mediatek mt8873
Mediatek mt8873 Firmware
Mediatek mt8883
Mediatek mt8883 Firmware
CPEs cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6815:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*
cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt2737_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6813_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6815_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6879_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6886_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6895_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6896_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6980_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6985_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt6990_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*
Vendors & Products Mediatek mt2737
Mediatek mt2737 Firmware
Mediatek mt6813
Mediatek mt6813 Firmware
Mediatek mt6815
Mediatek mt6815 Firmware
Mediatek mt6835
Mediatek mt6835 Firmware
Mediatek mt6878
Mediatek mt6878 Firmware
Mediatek mt6879
Mediatek mt6879 Firmware
Mediatek mt6886
Mediatek mt6886 Firmware
Mediatek mt6895
Mediatek mt6895 Firmware
Mediatek mt6896
Mediatek mt6896 Firmware
Mediatek mt6897
Mediatek mt6897 Firmware
Mediatek mt6980
Mediatek mt6980 Firmware
Mediatek mt6983
Mediatek mt6983 Firmware
Mediatek mt6985
Mediatek mt6985 Firmware
Mediatek mt6990
Mediatek mt6990 Firmware
Mediatek mt8676
Mediatek mt8676 Firmware
Mediatek mt8755
Mediatek mt8755 Firmware
Mediatek mt8775
Mediatek mt8775 Firmware
Mediatek mt8792
Mediatek mt8792 Firmware
Mediatek mt8798
Mediatek mt8798 Firmware
Mediatek mt8863
Mediatek mt8863 Firmware
Mediatek mt8873
Mediatek mt8873 Firmware
Mediatek mt8883
Mediatek mt8883 Firmware
Type Values Removed Values Added
Title Privilege Escalation via Permissions Bypass in MediaTek Modem
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 6.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Mediatek
Mediatek mediatek Chipset
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset
Vendors & Products Mediatek
Mediatek mediatek Chipset
Mediatek, Inc.
Mediatek, Inc. mediatek Chipset
Type Values Removed Values Added
Title Privilege Escalation via Permissions Bypass in MediaTek Modem
Type Values Removed Values Added
Description In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09608864 / ALPS09327759; Issue ID: MSV-2958.
Weaknesses CWE-732
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
MediaTek
Published
Updated
Nov 3, 2026, 4:55 AM
Reserved
Jul 31, 2026, 12:06 PM
Status
Analyzed
Published
Nov 2, 2026, 3:17 AM
Modified
Nov 12, 2026, 4:53 PM