Improper Authentication in Motorola's Factory Test Component
CVE-2026-5804

8.4HIGH

Key Information:

Vendor

Motorola

Status
Phones
Vendor
CVE Published:
19 May 2026

What is CVE-2026-5804?

An improper authentication vulnerability has been identified in the Motorola Factory Test component, allowing local attackers to exploit a writable file descriptor in external storage. This flaw can enable third-party applications to open a TCP server, potentially bypassing permission checks and gaining unauthorized access to sensitive device settings and data. This vulnerability raises security concerns as it could lead to unauthorized manipulation of device configurations and access to protected information.

Affected Version(s)

Phones 0 < 2026-04-05

References

https://en-us.support.motorola.com/app/answers/detail/a_i...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Motorola thanks Pranil Gholap for reporting this issue.
.