CVE Catalog

CVE-2026-55289

HighCVSS 8.4
Published: Updated: Translated: NVD NIST

Summary

In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.

Risk Assessment

An attacker could execute unauthorized USSD operations, potentially causing financial impact or privacy breaches. Local access is required, but no user interaction.

Recommendation

Update the system to a patched version. Restrict the ability of low-privilege apps to execute USSD codes.

Other vulnerabilities in multiple locations

See all
Original NVD description (English source)

In multiple functions in multiple locations, there is a possible execution of sensitive USSD codes due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS