CVE-2026-21070: Improper Input Validation

Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...

PT-2026-69411

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.72.6 Description Improper input validation allows adjacent attackers to access sensitive data. Recommendations Update to version 3.7.72.6 or later...

CVE-2026-21072: Improper Input Validation

Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21071: Improper Input Validation

Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21083: Improper Input Validation

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

PT-2026-69401

Name of the Vulnerable Software and Affected Versions Galaxy Themes versions prior to SMR Aug-2026 Release 1 Description Improper input validation allows physical attackers to launch arbitrary activity. Recommendations Update Galaxy Themes to SMR Aug-2026 Release 1...

PT-2026-69386

Name of the Vulnerable Software and Affected Versions Samsung Contacts versions prior to SMR Aug-2026 Release 1 Description Improper input validation allows physical attackers to access data across multiple user profiles. Recommendations Update Samsung Contacts to SMR Aug-2026 Release 1...

PT-2026-69384

Name of the Vulnerable Software and Affected Versions Samsung Contacts versions prior to SMR Aug-2026 Release 1 Description Improper input validation allows local attackers to delete files using the privileges of Samsung Contacts. Recommendations Update Samsung Contacts to SMR Aug-2026 Release 1...

CVE-2026-21060: Improper Input Validation

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles...

PT-2026-69398

Name of the Vulnerable Software and Affected Versions Samsung Message versions prior to SMR Aug-2026 Release 1 Description Improper input validation allows physical attackers to access sensitive information. Recommendations Update Samsung Message to SMR Aug-2026 Release 1...

CVE-2026-21073: Undefined Security Weakness

Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...

CVE-2026-21067: Undefined Security Weakness

Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

CVE-2026-21058: Improper Input Validation

Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege...

CVE-2026-21061: Improper Input Validation

Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions. User interaction is required for triggering this vulnerability...

CVE-2026-72728: Improper Input Validation

Discourse is an open-source discussion platform. Prior to 2026.1.7, an authenticated user could submit specially formed URLs that bypassed the Onebox allowlist and embedded malicious content in a site. This issue is fixed in versions 2026.1.7, 2026.6.2, 2026.7.1, and 2026.8.0-latest.1...

CVE-2026-21066: Improper Input Validation

Improper input validation in libcodec2secflacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...

Cisco Integrated Management Controller Argument Injection (CVE-2026-20288) (cisco-sa-cimc-arg-inject-upSHdMfU)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability. - A command injection vulnerability exists in the web-based management interface of Cisco Integrated Management Controller IMC due to improper validation of user-supplied input. An...

Improper Input Validation

Electron is vulnerable to Improper Input Validation. The vulnerability is due to the mode option of webContents.openDevTools not being sanitized before use by the DevTools frontend, which allows an attacker who can influence the value to execute arbitrary script in the DevTools context and...

CVE-2026-17598 Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration

Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updating a scheduled task through the administrative UI. An account holding permission to create at least one scheduled task type could supply a crafted property val...

CVE-2026-47664: Improper Input Validation

Pathling is a set of tools that make it easier to use FHIR and clinical terminology within health data analytics. Prior to version 2.0.0 of Pathling Server, the $import-pnp operation in Pathling Server accepts a caller-supplied exportUrl and uses it as the remote FHIR Bulk Export endpoint without...