CVE-2026-18058: CWE-862: Missing Authorization in Motorola Smart Connect Application

This vulnerability (CWE-862: Missing Authorization) affects the Motorola Smart Connect Application's mobile dashboard UI, allowing unauthorized manipulation by third-party applications. The flaw enables attackers to escalate privileges if they successfully combine this manipulation with a phishing attack. The CVSS 4.0 score of 7.3 reflects a high severity with local attack vector, high complexity, and required user interaction. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

An attacker with local access and limited privileges could manipulate the Smart Connect dashboard UI via third-party apps. When paired with phishing, this could lead to escalated privileges, potentially compromising system integrity or user data. The impact is significant due to the potential for privilege escalation, but exploitation requires user interaction and high attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when installing third-party applications and be vigilant against phishing attempts targeting the Smart Connect Application.