critical · CVSS v3 9.8

CVE-2026-58930

An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when r…

Description

An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI. This allows the attacker to squat on a specific authority if the legitimate package is absent, inject spoofed UI elements into the trusted SystemUI Quick Controls panel, and gain a Background Activity Launch (BAL) grant from SystemUI when the user interacts with the spoofed element.

Scores

Severity
critical
CVSS v2
8.5
CVSS v3
9.8
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

critical

CVE-2026-120228

A critical OS command injection flaw exists in the ioos service of WAVLINK WN553X1-B routers. Remote attackers can manipulate group_id/group_name arguments to execute arbitrary commands. The vulnerability can compromise device control and network security.

View analysis

critical

CVE-2026-120279

A critical OS command injection flaw exists in the openvpn_cli handler of WAVLINK WN536AX6-A routers, allowing remote attackers to execute arbitrary commands via the file_id parameter. The vulnerability can be exploited over the network without authentication. It has been publicly disclosed and is actively used by threat actors.

View analysis

critical

CVE-2026-58968

In oapvd_vlc_metadata of oapv_vlc.c, there is a possible memory corruption due to a double free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

View analysis

critical

CVE-2026-58978

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

View analysis