CVE-2026-21383Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
Updated under an hour ago ()
Does this affect you?
It affects qualcomm fastconnect_6900_firmware and 52 other products. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.
- CVSS
- 7.1 HIGH (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
- Weakness (CWE)
- CWE-323
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Analyzed
- Record last updated
- Jul 8, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
qualcomm fastconnect_6900_firmware qualcomm:fastconnect_6900_firmware | all versions | NVD |
qualcomm fastconnect_7800_firmware qualcomm:fastconnect_7800_firmware | all versions | NVD |
qualcomm lemans_au_lgit_firmware qualcomm:lemans_au_lgit_firmware | all versions | NVD |
qualcomm lemansau_firmware qualcomm:lemansau_firmware | all versions | NVD |
qualcomm pandeiro_firmware qualcomm:pandeiro_firmware | all versions | NVD |
qualcomm qam8255p_firmware qualcomm:qam8255p_firmware | all versions | NVD |
qualcomm qam8397p_firmware qualcomm:qam8397p_firmware | all versions | NVD |
qualcomm qam8797p_firmware qualcomm:qam8797p_firmware | all versions | NVD |
qualcomm qamsrv1h_firmware qualcomm:qamsrv1h_firmware | all versions | NVD |
qualcomm qamsrv1m_firmware qualcomm:qamsrv1m_firmware | all versions | NVD |
qualcomm qca6595au_firmware qualcomm:qca6595au_firmware | all versions | NVD |
qualcomm qca6696_firmware qualcomm:qca6696_firmware | all versions | NVD |
qualcomm qca6698aq_firmware qualcomm:qca6698aq_firmware | all versions | NVD |
qualcomm qca6797aq_firmware qualcomm:qca6797aq_firmware | all versions | NVD |
qualcomm qca8695au_firmware qualcomm:qca8695au_firmware | all versions | NVD |
qualcomm qdu1000_firmware qualcomm:qdu1000_firmware | all versions | NVD |
qualcomm qdu1110_firmware qualcomm:qdu1110_firmware | all versions | NVD |
qualcomm qdu1210_firmware qualcomm:qdu1210_firmware | all versions | NVD |
qualcomm qdx1010_firmware qualcomm:qdx1010_firmware | all versions | NVD |
qualcomm qdx1011_firmware qualcomm:qdx1011_firmware | all versions | NVD |
qualcomm qln1083bd_firmware qualcomm:qln1083bd_firmware | all versions | NVD |
qualcomm qln1086bd_firmware qualcomm:qln1086bd_firmware | all versions | NVD |
qualcomm qpa1083bd_firmware qualcomm:qpa1083bd_firmware | all versions | NVD |
qualcomm qpa1086bd_firmware qualcomm:qpa1086bd_firmware | all versions | NVD |
qualcomm qualcomm_dragonwing_x100_accelerator_card_firmware qualcomm:qualcomm_dragonwing_x100_accelerator_card_firmware | all versions | NVD |
qualcomm qxm1093_firmware qualcomm:qxm1093_firmware | all versions | NVD |
qualcomm qxm1094_firmware qualcomm:qxm1094_firmware | all versions | NVD |
qualcomm qxm1095_firmware qualcomm:qxm1095_firmware | all versions | NVD |
qualcomm qxm1096_firmware qualcomm:qxm1096_firmware | all versions | NVD |
qualcomm sa7255p_firmware qualcomm:sa7255p_firmware | all versions | NVD |
qualcomm sa7775p_firmware qualcomm:sa7775p_firmware | all versions | NVD |
qualcomm sa8255p_firmware qualcomm:sa8255p_firmware | all versions | NVD |
qualcomm sa8620p_firmware qualcomm:sa8620p_firmware | all versions | NVD |
qualcomm sa8770p_firmware qualcomm:sa8770p_firmware | all versions | NVD |
qualcomm sa9000p_firmware qualcomm:sa9000p_firmware | all versions | NVD |
qualcomm sar1165p_firmware qualcomm:sar1165p_firmware | all versions | NVD |
qualcomm sar2130p_firmware qualcomm:sar2130p_firmware | all versions | NVD |
qualcomm snapdragon_ar1_gen_1_platform_firmware qualcomm:snapdragon_ar1_gen_1_platform_firmware | all versions | NVD |
qualcomm snapdragon_ar1+_gen_1_platform_firmware qualcomm:snapdragon_ar1+_gen_1_platform_firmware | all versions | NVD |
qualcomm srv1h_firmware qualcomm:srv1h_firmware | all versions | NVD |
qualcomm srv1m_firmware qualcomm:srv1m_firmware | all versions | NVD |
qualcomm sxr2230p_firmware qualcomm:sxr2230p_firmware | all versions | NVD |
qualcomm sxr2250p_firmware qualcomm:sxr2250p_firmware | all versions | NVD |
qualcomm wcd9380_firmware qualcomm:wcd9380_firmware | all versions | NVD |
qualcomm wcd9385_firmware qualcomm:wcd9385_firmware | all versions | NVD |
qualcomm wcn3950_firmware qualcomm:wcn3950_firmware | all versions | NVD |
qualcomm wcn7860_firmware qualcomm:wcn7860_firmware | all versions | NVD |
qualcomm wcn7861_firmware qualcomm:wcn7861_firmware | all versions | NVD |
qualcomm wsa8830_firmware qualcomm:wsa8830_firmware | all versions | NVD |
qualcomm wsa8832_firmware qualcomm:wsa8832_firmware | all versions | NVD |
qualcomm wsa8835_firmware qualcomm:wsa8835_firmware | all versions | NVD |
qualcomm xrv7209_firmware qualcomm:xrv7209_firmware | all versions | NVD |
qualcomm xrv9209_firmware qualcomm:xrv9209_firmware | all versions | NVD |
References
- https://docs.qualcomm.com/product/publicresources/securitybulletin/july-2026-bulletin.htmlvendor-advisory
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.