CVE-2026-20435

In preloader, there is a possible read of device unique identifiers due to a logic error. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS10607099; Issue ID: MSV-6118.

• CWE-522

• https://corp.mediatek.com/product-security-bulletin/March-2026Vendor Advisory

Published

Mar 2, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2043Nagios Host esensors_websensor_configwizard_func Command Inj…8.8
• CVE-2026-20430In wlan AP FW, there is a possible out of bounds write due t…8.8
• CVE-2026-20431In Modem, there is a possible system crash due to a logic er…6.5
• CVE-2026-20432In Modem, there is a possible out of bounds write due to a m…8
• CVE-2026-20433In Modem, there is a possible out of bounds write due to a m…8.8
• CVE-2026-20434In Modem, there is a possible out of bounds write due to a m…7.5
• CVE-2026-20436In wlan STA driver, there is a possible escalation of privil…6.7
• CVE-2026-20437In MAE, there is a possible system crash due to use after fr…4.4
• CVE-2026-20438In MAE, there is a possible out of bounds write due to a rac…6.4
• CVE-2026-20439In imgsys, there is a possible system crash due to use after…4.4
• CVE-2026-2044GIMP PGM File Parsing Uninitialized Memory Remote Code Execu…8.8
• CVE-2026-20440In MAE, there is a possible out of bounds write due to a mis…6.7