CVE-2026-21120

Use after free in WSM service prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code with system privilege...

CVE-2026-21122

Out-of-bounds write in libsamsungtts.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-21114

Out-of-bounds write in libsmkvextractor.so prior to SMR Oct-2026 Release 1 allows local attackers to execute arbitrary code...

CVE-2026-108803

A security vulnerability exists in y_project RuoYi versions up to 4.8.3 . The flaw specifically impacts the changeStatus function within the /system/config/add file of the Disable API component. This vulnerability, categorized under CWE-613 (Insufficient Session Expiration) , allows an attacker t...

EUVD-2026-97237

A security vulnerability has been detected in yproject RuoYi up to 4.8.3. This impacts the function changeStatus of the file /system/config/add of the component Disable API. The manipulation leads to session expiration. It is possible to initiate the attack remotely. The vendor was contacted earl...

routopsy

routopsy Routopsy is a toolkit built to attack often overlooked networking protocols. Routopsy currently supports attacks against Dynamic Routing Protocols DRP and First-Hop Redundancy Protocols FHRP. Most of the attacks currently implemented make use of a weaponised 'virtual router' as opposed t...

EUVD-2026-97203

Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...

EUVD-2026-97202

Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications...

CVE-2026-21138

A vulnerability in Smart Switch (versions prior to 3.7.73 ) allows physical attackers to install arbitrary applications due to insufficient verification of data authenticity . The CVSS 4.0 score of 6.9 (Medium) reflects a physical attack vector requiring no user interaction. No specific exploit i...

CVE-2026-21137

A path traversal vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to access files with Smart Switch privilege . No specific exploit details or remediation steps are provided in the documents.

EUVD-2026-97201

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege...

CVE-2026-21136

An improper authorization vulnerability exists in Smart Switch prior to version 3.7.73 . This flaw allows physical attackers to invoke the application restore process. No specific exploit details or in-the-wild exploitation links are provided in the documents. Remediation information is not speci...

EUVD-2026-97199

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

CVE-2026-21134

Versions of Samsung Flow prior to 4.9.22.4 are susceptible to an improper authentication vulnerability. This flaw allows adjacent attackers to gain unauthorized access to sensitive information . No specific exploit details or remediation instructions are provided in the documents.

EUVD-2026-97198

Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information...

EUVD-2026-97197

Path traversal in Samsung Flow prior to version 4.9.22.1 allows local attackers to access clipboard data...

CVE-2026-21133

A path traversal vulnerability exists in Samsung Flow prior to version 4.9.22.1 . This flaw allows local attackers to gain unauthorized access to clipboard data . No specific exploit information or additional remediation steps are provided in the documents beyond the indicated version update.

CVE-2026-21132

A vulnerability in Samsung Internet prior to version 30.0.5.24 exists due to improper input validation . This flaw allows remote attackers to perform arbitrary script injection , which requires user interaction to trigger. No specific exploit details or direct links are provided in the documentat...

CVE-2026-21131

A vulnerability in Samsung Flow prior to version 4.9.22.4 exists due to an incorrect default permission . This flaw allows local attackers to launch an arbitrary activity with Samsung Flow privileges on a connected device. No specific exploit details or manual mitigation steps are provided in the...