2
CVEs
0
Critical
2
High
0
KEV
0
PoC
0
Unpatched C/H
100.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
2
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
M2 Firmware
10
Cx2L Firmware
5
Cx2 Firmware
5
Mr2600 Firmware
5
C1 Firmware
5
Ace1000 Firmware
5
Vigilant Fixed Lpr Coms Box Firmware
3
Mbts Site Controller Firmware
3
Moscad Ip Gateway Firmware
3
Android
3
Mx011Anm Firmware
3
Defy Xt
2
Mbts Base Radio Firmware
2
Jwt Attack
2
Mm1000 Firmware
2
Cx2L Mwr04L Firmware
2
Motorola Scanner Sdk
2
T101 Firmware
1
Sbg901 Firmware
1
Razr Hd
1
Sbg941 Firmware
1
T008 Firmware
1
T290 Firmware
1
T103 Firmware
1
T200 Firmware
1
Motorola Firmware
1
Mbp853 Firmware
1
Fx9500 81324D41 Ww Firmware
1
Svg1202 Firmware
1
Ebts Site Controller Firmware
1
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-5804 | Authentication bypass in the Motorola Factory Test component (com.motorola.motocit) on Motorola phones lets a co-resident Android app abuse an exposed writable file descriptor in external storage to stand up a TCP server, harvest protected settings, and act with the factory-test app's elevated permissions. The flaw is locally exploitable by any installed third-party app with low privileges and carries CVSS 4.0 score 8.4 with high confidentiality and integrity impact. No public exploit identified at time of analysis and not listed in CISA KEV. | HIGH | 8.4 | 0.0% | 42 |
|
| CVE-2026-18058 | Privilege escalation in the Motorola Smart Connect mobile application stems from insufficient authorization controls (CWE-862) on the dashboard UI, which can be manipulated by third-party applications installed on the same device. When paired with a phishing attack targeting the device user, this manipulation enables an attacker to escalate privileges within the device or connected system. No public exploit has been identified at time of analysis, and active exploitation has not been confirmed by CISA KEV. | HIGH | 7.3 | 0.1% | 37 |
|