{"vulnerability": "CVE-2026-25254", "sightings": [{"uuid": "c9892cd1-d749-4279-8c9e-02838f78082f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25254", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117314225808795424", "content": "Qualcomm Snapdragon devices hit by CRITICAL CVE-2026-25254: improper authorization in SocketIO allows unauthenticated RCE. No patch yet; monitor advisories and review exposure. CVSS 9.8. https://radar.offseq.com/threat/cve-2026-25254-cwe-285-improper-authorization-in-qualcomm-inc-snapdragon-b8f8f52a617468af #OffSeq #CVE202625254 #Snapdragon #Infosec #Vuln", "creation_timestamp": "2026-09-22T10:30:26.415519Z"}, {"uuid": "f6b245c5-7421-46c4-a787-8ffb16a882d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-25254", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mw3zhiop3v2e", "content": "CRITICAL Snapdragon flaw: CVE-2026-25254 allows remote code execution via improper SocketIO authorization. No patch yet \u2014 monitor vendor updates. Affects confidentiality, integrity, and availability. https://radar.offseq.com/threat/cve-2026-25254-cwe-285-improper-authorization-in-qualcomm-inc-sna...", "creation_timestamp": "2026-09-22T10:30:28.762637Z"}, {"uuid": "de271d22-d5fc-4f1b-a26c-d0f5d1abd938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25254", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mw42kngzs72n", "content": "CVE-2026-25254 - snapdragon\nThe Snapdragon Software Center from Qualcomm can be tricked into running malicious code through its network communication feature. This could let an attacker take control of\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#snapdragon #qualcomm #CVE #infosec", "creation_timestamp": "2026-09-22T10:50:07.346812Z"}, {"uuid": "44aba7e9-44d6-4bc5-ba99-7d895acb6b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25254", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mw46un2hum2y", "content": "\ud83d\udea8 CVE-2026-25254 \u2014 CVSS 9.8 CRITICAL\n\nImproper authorization leads to Remote Code Execution via SocketIO interface.\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-25254\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-22T12:07:18.296734Z"}]}