9
CVEs
0
Critical
9
High
0
KEV
0
PoC
9
Unpatched C/H
0.0%
Patch Rate
0.4%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
9
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (3)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-4967 | Remote denial of service in the IMS (IP Multimedia Subsystem) implementation of Unisoc mobile chipsets allows an unauthenticated remote attacker to crash the affected component via an out-of-bounds read triggered by a missing bounds check. The flaw spans a broad range of Unisoc SoCs (SC7731E, SC9832E, SC9863A, T310/T610/T618, T7200-series, T8100/T8200/T8300, T9100) commonly used in budget Android smartphones. It carries CVSS 7.5 with availability-only impact and no confidentiality or integrity effect; there is no public exploit identified at time of analysis and it is not listed in CISA KEV. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21548 | Improper input validation in Unisoc's NR (5G New Radio) modem component affects T8100, T9100, T8200, and T8300 chipsets, enabling remote denial-of-service against devices incorporating these baseband processors. The modem's failure to validate incoming data can be triggered remotely, causing an availability impact classified as High - effectively crashing or disrupting the modem subsystem. No public exploit code has been identified at time of analysis, and the vulnerability was disclosed by Unisoc via their product security bulletin. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21549 | Remote denial of service in Unisoc modem firmware affects T8100, T9100, T8200, and T8300 chipsets through improper input validation. An unauthenticated remote attacker can send crafted network input to the modem component, causing an availability failure - effectively cutting off cellular connectivity on affected devices. No public exploit has been identified at time of analysis, and no KEV listing exists, but the CVSS:3.1/AV:N/AC:L/PR:N/UI:N profile means no preconditions limit the attacker's reach against any device using these chipsets. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21550 | Remote denial of service in the Unisoc modem component of T8100, T9100, T8200, and T8300 chipsets allows unauthenticated network-adjacent or remote attackers to crash the modem by sending malformed input, severing cellular connectivity on affected devices. The CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H vector confirms no privileges or user interaction are required, and the attack surface is the baseband network interface. No public exploit has been identified at time of analysis, and this vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21551 | Remote denial of service in Unisoc modem firmware affects T8100, T9100, T8200, and T8300 chipsets due to improper input validation in the modem stack. Unauthenticated remote attackers can crash or render the modem unresponsive - severing cellular connectivity on affected devices - without requiring any privileges or user interaction. No public exploit code or CISA KEV listing has been identified at time of analysis, though the network-accessible, zero-complexity attack path represents a meaningful availability risk for devices dependent on continuous cellular communication. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21552 | Remote denial of service in the modem firmware of Unisoc T8100, T9100, T8200, and T8300 chipsets allows an unauthenticated remote attacker to crash the modem subsystem by sending crafted cellular signaling data, disabling cellular connectivity on affected devices. The CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) reflects full availability impact with no victim-side prerequisites, though practical exploitation requires the attacker to control or simulate cellular network infrastructure in radio proximity. No public exploit has been identified at time of analysis, and this vulnerability has not been added to the CISA KEV catalog. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21553 | Remote denial of service in Unisoc T8100/T9100/T8200/T8300 modem firmware allows unauthenticated remote attackers to crash or render the modem inoperable through crafted network input. The CVSS vector (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) confirms exploitation requires no authentication, no user interaction, and low complexity, making any exposed device potentially reachable. No public exploit code or CISA KEV listing has been identified at time of analysis, though the low barrier to exploitation warrants prompt firmware patching. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21554 | Remote denial of service in the Unisoc UDX710 modem allows unauthenticated remote attackers to crash or disable modem functionality by sending crafted network input that bypasses input validation in the baseband stack. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication, no user interaction, and no elevated privileges - only network-reachable access to the modem. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis. | HIGH | 7.5 | 0.4% | 38 |
No patch
|
| CVE-2026-21555 | Remote denial of service in the Unisoc UDX710 modem allows a network-adjacent or remote attacker to crash the modem subsystem of affected devices by sending malformed or crafted input that bypasses input validation. The vulnerability requires no authentication and no user interaction, per the CVSS:3.1/AV:N/AC:L/PR:N/UI:N vector. Impact is limited to availability - there is no confidentiality or integrity exposure - but a successful attack would disrupt cellular connectivity on the affected device. No public exploit code and no CISA KEV listing have been identified at time of analysis. | HIGH | 7.5 | 0.4% | 38 |
No patch
|