German broadcaster BR has reported a security vulnerability in mobile networks that allowed attackers to access sensitive smartphone data. The flaw was detailed in a report published on Thursday, August 27, 2026, and was also covered by other German outlets including tagesschau.de, FAZ, and Spiegel.
According to BR, the vulnerability could be exploited during phone calls, potentially exposing device information before a call was even connected. The report indicates that an incoming call alone was enough to trigger the data leak, meaning users did not need to answer or initiate a conversation for their information to be at risk.
The coverage from tagesschau.de specifies that attackers could spy on smartphone data "before the phone took off," suggesting the breach occurred at the start of a call setup. FAZ similarly noted that the flaw laid bare device data during telephony, while NDR.de highlighted that a single ring was sufficient to exploit the issue. The exact technical details of the vulnerability, including which mobile carriers were affected or whether a patch has been issued, were not disclosed in the initial reporting.
This development raises fresh concerns about the security of standard cellular communications, which are often assumed to be protected by encryption. The fact that the flaw appears to be triggered by a simple incoming call makes it particularly concerning for everyday users, as no action is required from the victim.
What to watch next is whether network operators or regulatory bodies respond with guidance or a fix, and whether further technical specifics emerge from the researchers who identified the issue.
