OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-87726

LOW · CVSS 3.9 EPSS 0.10%

Source: NVD + CISA KEV + EPSS · Published 2026-10-08 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

Insufficient API bounds checking in the phalFelica component of NXP's NXPNfcRdLib RC663 can allow attackers with privileges or untrusted parties to access unintended memory regions, which may result in limited loss of confidentiality, integrity, and availability. Organizations using affected versions prior to 07.18.00 should prioritize updating to the latest software release to mitigate potential risks associated with this vulnerability.

CVE
CVE-2026-87726
Severity
LOW
CVSS
3.9
EPSS
0.10%

Original NVD Description

Insufficient API bounds checking in phalFelica in NXP NXPNfcRdLib RC663 through 07.14.00_Pub may allow an attacker with privileges or an untrusted third party to access unintended memory regions, potentially leading to limited loss of confidentiality, integrity, and availability. All software versions from 07.18.00 onwards have fixed this problem.