BaseFortify

Publication date: 2026-06-12

Last updated on: 2026-06-17

Assigner: Vivo Mobile Communication Co., Ltd.

Description

The connection confirmation pop-up of a specific feature in the PcSuite can be bypassed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-12

Last Modified

2026-06-17

Generated

2026-10-11

AI Q&A

2026-06-12

EPSS Evaluated

2026-10-10

NVD

CVE-2026-12058

EUVD

EUVD-2026-36392

Affected Vendors & Products

Vendor	Product	Version / Range
vivo	PcSuite	Versions below 6.2.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-807	The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism.

Attack-Flow Graph

Executive Summary

This vulnerability involves the connection confirmation pop-up of a specific feature in the PcSuite software being bypassed.

Impact Analysis

Bypassing the connection confirmation pop-up could allow unauthorized or unintended connections to be established without user consent or awareness.

Hi! I’m here to help you understand CVE-2026-12058. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70