What is CVE-2026-23792?

CVE-2026-23792 is a medium-severity vulnerability in Samsung Exynos 1080 Firmware, classified under Origin Validation Error. CVSS score: 4.0/10. Published 2026-09-14.

How severe is CVE-2026-23792?

Medium severity. CVSS v3 base score is 4.0 out of 10.

Vulnerability in Samsung Exynos 1080 Firmware

CVE-2026-23792

An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, Modem 5400, and Modem 5410. Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash.

EPSS: 0.001 (3.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.0 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L.

Affected products

Samsung Exynos 1080 Firmware

Weakness classification (CWE)

CWE-346 — Origin Validation Error

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-23792?: CVE-2026-23792 is a medium-severity vulnerability in Samsung Exynos 1080 Firmware, classified under Origin Validation Error. CVSS score: 4.0/10. Published 2026-09-14.
How severe is CVE-2026-23792?: Medium severity. CVSS v3 base score is 4.0 out of 10.