← Back to search

CVE-2026-57537

7.8 HIGH

Published 2026-10-06 · Updated 2026-10-09

AI risk analysis

Summary
This vulnerability is a memory corruption flaw that occurs when geographic mapping data is accessed and modified concurrently without proper synchronization, leading to potential arbitrary code execution or system instability. The issue affects Qualcomm-based networking devices and can be exploited by authenticated attackers.
Exploitability
Exploitation requires an authenticated attacker with access to the device's management interface, making it moderately difficult but not highly complex to achieve, with no additional preconditions beyond valid credentials.
Blast radius
If exploited, this flaw could impact a wide range of Qualcomm-based networking devices including FastConnect 6200, 6900, and 7800 models, potentially affecting network infrastructure and connectivity for multiple users.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to firmware version 2.590 or later for all affected FastConnect devices (6200, 6900, 7800) and Congo devices.
memory-corruptionnetworkingics

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416

Vendors

qualcomm

Products

congo firmware, congo, fastconnect 6200 firmware, fastconnect 6200, fastconnect 6900 firmware, fastconnect 6900, fastconnect 7800 firmware, fastconnect 7800, orne firmware, orne, pandeiro firmware, pandeiro

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.