en-us.support.motorola.com
https://en-us.support.motorola.com/app/answers/detail/a_id/192534 CVE-2026-5804
HIGH
Motorola Phones com.motorola.motocit Improper Authentication Vulnerability
Record summary
CVE-2026-5804 has a selected CVSS score of 8.4 (high).
Description
An improper authentication vulnerability was discovered in the Motorola Factory Test component (com.motorola.motocit). The application contained a reference to a writable file descriptor in external storage which could be used by third party apps running on the device to open a TCP server, exposing sensitive permissions and data. This could allow a local attacker to bypass permission checks and access protected device settings.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated May 19, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Default status: unknown | CVE List | Before 2026-04-05 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2026-5804