CVE-2026-20431

CVE-2026-20431 is a logic error vulnerability affecting Modem that enables remote denial of service attacks. An unauthenticated attacker controlling a rogue base station can trigger a system crash on any user equipment connected to the malicious station, requiring no user interaction or special privileges. The vulnerability carries a CVSS 3.1 score of 6.5 (Medium), with an adjacent network attack vector and high availability impact. The attack requires no authentication or user interaction, and can only be launched from a network position allowing base station impersonation. The FAUCET Risk Score of 44.0/100 indicates moderate concern. There is no evidence of active exploitation. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog, and the EPSS score of 0.0002 indicates minimal probability of exploitation in the wild. Community attention appears limited at this time, though organizations operating cellular infrastructure should apply patch MOLY01106496 (Issue ID MSV-4467) to remediate the risk.