The vulnerability identified as CVE-2026-21554 affects the Unisoc (Shanghai) Technologies Co., Ltd. UDX710 modem. It stems from improper input validation (CWE-20) within the modem component, which could be triggered remotely by an attacker without requiring privileges or user interaction. Successful exploitation results in a denial of service condition, impacting availability but not confidentiality or integrity. The CVSS v3.1 base score is 7.5, reflecting a high severity due to network attack vector, low attack complexity, and no required privileges or user interaction. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

The vulnerability allows a remote attacker to cause a denial of service on the affected modem, disrupting availability. There is no impact on confidentiality or integrity. No additional execution privileges are needed to exploit this issue.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor vendor communications for updates. No official mitigation or workaround has been provided by the vendor.