Access Control Flaw in IMS Stack of Samsung Telecommunications Products
CVE-2026-35495

Currently unrated

Key Information:

Vendor: Samsung Semiconductor
Status: Exynos 1080; Exynos 9110; Exynos Modem 5123; Exynos Modem 5300
Vendor: CVE Published:; 5 November 2026

🔔 Create Samsung Semiconductor Vulnerability Alert

What is CVE-2026-35495?

Improper handling of Session Initiation Protocol (SIP) packets in the IMS stack of Samsung telecommunications products can lead to vulnerabilities in access control mechanisms. Attackers may exploit this flaw to manipulate SIP requests, potentially gaining unauthorized access to sensitive resources within network environments. It is critical for users and administrators to remain vigilant and implement necessary security measures to safeguard their systems.

Affected Version(s)

Exynos 1080 0

Exynos 9110 0

Exynos Modem 5123 0

References

https://semiconductor.samsung.com/support/quality-support...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 5, 2026
Vulnerability Reserved
Apr 2, 2026

CVE-2026-35495 Data

JSON