CVE-2026-21383

High

Description

Cryptographic Issue when using a static initialization vector for AES-GCM key wrapping, which requires a unique value for each call to ensure security.

SeverityHigh
CVSS7.1
Exploit probability—
ProductQualcomm Fastconnect 6900 Firmware
PublishedJul 6, 2026
First seenJul 6, 2026
Weakness typeCWE-323CWE-323

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
qualcomm fastconnect_6900_firmwareNo range specified—
qualcomm fastconnect_7800_firmwareNo range specified—
qualcomm lemans_au_lgit_firmwareNo range specified—
qualcomm lemansau_firmwareNo range specified—
qualcomm pandeiro_firmwareNo range specified—
qualcomm qam8255p_firmwareNo range specified—
qualcomm qam8397p_firmwareNo range specified—
qualcomm qam8797p_firmwareNo range specified—
qualcomm qamsrv1h_firmwareNo range specified—
qualcomm qamsrv1m_firmwareNo range specified—
qualcomm qca6595au_firmwareNo range specified—
qualcomm qca6696_firmwareNo range specified—
qualcomm qca6698aq_firmwareNo range specified—
qualcomm qca6797aq_firmwareNo range specified—
qualcomm qca8695au_firmwareNo range specified—
qualcomm qdu1000_firmwareNo range specified—
qualcomm qdu1110_firmwareNo range specified—
qualcomm qdu1210_firmwareNo range specified—
qualcomm qdx1010_firmwareNo range specified—
qualcomm qdx1011_firmwareNo range specified—
qualcomm qln1083bd_firmwareNo range specified—
qualcomm qln1086bd_firmwareNo range specified—
qualcomm qpa1083bd_firmwareNo range specified—
qualcomm qpa1086bd_firmwareNo range specified—
qualcomm qualcomm_dragonwing_x100_accelerator_card_firmwareNo range specified—
qualcomm qxm1093_firmwareNo range specified—
qualcomm qxm1094_firmwareNo range specified—
qualcomm qxm1095_firmwareNo range specified—
qualcomm qxm1096_firmwareNo range specified—
qualcomm sa7255p_firmwareNo range specified—
qualcomm sa7775p_firmwareNo range specified—
qualcomm sa8255p_firmwareNo range specified—
qualcomm sa8620p_firmwareNo range specified—
qualcomm sa8770p_firmwareNo range specified—
qualcomm sa9000p_firmwareNo range specified—
qualcomm sar1165p_firmwareNo range specified—
qualcomm sar2130p_firmwareNo range specified—
qualcomm snapdragon_ar1_gen_1_platform_firmwareNo range specified—
qualcomm snapdragon_ar1\+_gen_1_platform_firmwareNo range specified—
qualcomm srv1h_firmwareNo range specified—
qualcomm srv1m_firmwareNo range specified—
qualcomm sxr2230p_firmwareNo range specified—
qualcomm sxr2250p_firmwareNo range specified—
qualcomm wcd9380_firmwareNo range specified—
qualcomm wcd9385_firmwareNo range specified—
qualcomm wcn3950_firmwareNo range specified—
qualcomm wcn7860_firmwareNo range specified—
qualcomm wcn7861_firmwareNo range specified—
qualcomm wsa8830_firmwareNo range specified—
qualcomm wsa8832_firmwareNo range specified—
qualcomm wsa8835_firmwareNo range specified—
qualcomm xrv7209_firmwareNo range specified—
qualcomm xrv9209_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.