CVE-2026-33971

CVSS 9.8 (critical) · published 2026-11-05

In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition.

Weakness: CWE-400

Source: NVD CVE-2026-33971

References

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.