Vulnerability Details CVE-2026-20498
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 1.7%
CVSS Severity
CVSS v3 Score 6.0
Products affected by CVE-2026-20498
-
cpe:2.3:h:mediatek:mt6991:-
-
cpe:2.3:h:mediatek:mt8791t:-
-
cpe:2.3:h:mediatek:mt8792:-
-
cpe:2.3:h:mediatek:mt8796:-
-
cpe:2.3:h:mediatek:mt8799:-
-
cpe:2.3:h:mediatek:mt8873:-
-
cpe:2.3:h:mediatek:mt8883:-
-
cpe:2.3:h:mediatek:mt8893:-
-
cpe:2.3:h:mediatek:mt8910:-
-
cpe:2.3:o:mediatek:mt8768_firmware:-
-
cpe:2.3:o:mediatek:mt8791t_firmware:-
-
cpe:2.3:o:mediatek:mt8792_firmware:-
-
cpe:2.3:o:mediatek:mt8796_firmware:-
-
cpe:2.3:o:mediatek:mt8799_firmware:-
-
cpe:2.3:o:mediatek:mt8873_firmware:-
-
cpe:2.3:o:mediatek:mt8883_firmware:-
-
cpe:2.3:o:mediatek:mt8893_firmware:-
-
cpe:2.3:o:mediatek:mt8910_firmware:-