{"id":"CVE-2026-57546","published":"2026-10-06T07:16:58.630","lastModified":"2026-10-09T14:12:27.940","description":"Transient DOS when processing a continuous receive command with a zero-sized global configuration override.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwes":["CWE-126"],"vendors":["qualcomm"],"products":["congo firmware","congo","fastconnect 7800 firmware","fastconnect 7800","orne firmware","orne","pandeiro firmware","pandeiro","fastconnect 8800 mobile connectivity system firmware","fastconnect 8800 mobile connectivity system","sm8950 firmware","sm8950"],"references":[{"url":"https://docs.qualcomm.com/product/publicresources/securitybulletin/october-2026-bulletin.html","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows a transient denial-of-service (DOS) condition when processing continuous receive commands with zero-sized global configuration overrides. The flaw occurs in Qualcomm's firmware implementations across multiple device types, causing temporary system unresponsiveness that can disrupt operations.","exploitability":"Exploitation appears difficult without specific preconditions, as the vulnerability requires sending a specially crafted continuous receive command with a zero-sized global configuration override, but no public exploit references are available.","blast_radius":"The impact is limited to transient DOS conditions affecting system responsiveness, with potential disruption to network connectivity and device management functions across affected Qualcomm-based devices in the field.","remediation":"Upgrade to firmware version 2.590 or later for affected devices, specifically targeting the Qualcomm-based systems including FastConnect 7800, Orne, Pandeiro, and Congo devices.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["dos","firmware","ics"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:00:38.514Z"}}