172353 matches found
CVE-2026-66406
DEEBOT PRO M1 and DEEBOT PRO K1VAC are affected by CVE-2026-66406: wget is used with server certificate verification disabled, enabling a MITM to obtain/alter communications and potentially execute arbitrary code with administrative privileges. The issue is described as Missing server certificate...
EUVD-2026-55113
DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products. As a result, arbitrary code may be executed with the administrative privilege...
EUVD-2026-55111
DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved...
CVE-2026-66404
DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications. Operation logs and activity logs stored on the affected products may be retrieved...
CVE-2026-21083
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...
CVE-2026-21083
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...
CVE-2026-21083
CVE-2026-21083 affects Samsung Smart Switch software with improper input validation in versions before 3.7.72.6, enabling adjacent attackers to access sensitive data (confidentiality impact high). The description indicates the vulnerability is fixed in 3.7.72.6 or later; update to that version or...
EUVD-2026-55108
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...
CVE-2026-21073
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...
CVE-2026-21073
CVE-2026-21073 affects Galaxy Themes prior to the SMR Aug-2026 Release 1. Description: improper input validation could allow a physical attacker to launch arbitrary activity. CVSS v4.0 score is 5.2 (Medium) with Attack Vector: Physical, Attack Complexity: Low, Privileges Required: None, User Inte...
CVE-2026-21073
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...
EUVD-2026-55098
Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity...
EUVD-2026-55097
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21072
Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory...
CVE-2026-21072
A local attacker with low privileges can trigger out-of-bounds memory writes via the VC1 codec in libsavsvc.so on Samsung devices prior to the August 2026 Security Maintenance Release. NVD rates this HIGH (7.8), while Samsung's CNA rates it MEDIUM (5.1). No exploitation evidence is provided. Appl...
CVE-2026-21071
Improper input validation in the MPEG4 codec within libsavsvc.so allows local attackers to write out-of-bounds memory on Samsung devices prior to the SMR Aug-2026 Release 1 update. NVD rates it HIGH (CVSS 7.8) requiring low privileges; Samsung rates it MEDIUM (CVSS 5.1). No exploitation details a...
CVE-2026-21070
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...
CVE-2026-21070
Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information...