CVE-2026-25293 - Incorrect authorization in PLC FW

CRITICAL

Incorrect authorization in PLC FW

Published May 4, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.18%

Buffer overflow due to incorrect authorization in PLC FW

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Qualcomm, Inc.	Snapdragon	unaffected	Affected QCA7005

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

Link	Providers	Tags
https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2026-bulletin.html		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26992		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner qualcomm

Published May 4, 2026

Updated May 5, 2026

Reserved Feb 2, 2026

CISA Vulnrichment

Updated May 4, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner qualcomm

Published May 4, 2026

Updated May 5, 2026

GitHub

No data