This vulnerability (CVE-2026-25293) affects the Qualcomm Snapdragon QCA7005 device and is classified under CWE-863 (Incorrect Authorization). It results from a buffer overflow in the PLC firmware due to improper authorization checks. The CVSS v3.1 base score is 9.6, reflecting an attack vector requiring adjacent network access, no privileges or user interaction, and complete impact on confidentiality, integrity, and availability. The vendor has published the vulnerability but has not yet provided a remediation or patch. The vulnerability is not related to a cloud service and no exploit activity has been reported.

Successful exploitation of this vulnerability could allow an attacker with adjacent network access to cause a buffer overflow, leading to full compromise of the affected device's confidentiality, integrity, and availability. This could result in unauthorized code execution or denial of service on the Snapdragon QCA7005 platform. No known exploits have been observed in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation has been published by Qualcomm, users should monitor for vendor updates and apply patches promptly once available. Until then, limiting network exposure of affected devices may reduce risk.