CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege...

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege...

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege...

CVE-2026-21004

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service...

CVE-2026-21004

Observation: CVE-2026-21004 is a reserved candidate entry. The connected document EUVD-2026-12323 describes an issue in Smart Switch with improper authentication prior to version 3.7.69.15 , which allows adjacent attackers to trigger a denial of service . What is affected: Smart Switch devices ru...

CVE-2026-20999

Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions...

CVE-2026-20999

EUVD-2026-12315 and PT-2026-25604 describe an authentication bypass by replay in Smart Switch prior to version 3.7.69.15, allowing remote attackers to trigger privileged functions. Affected: Smart Switch (pre-3.7.69.15). Root cause: replay attack bypasses authentication. Impact: remote triggering...

CVE-2026-20998

CVE-2026-20998 concerns Samsung Smart Switch; an improper authentication flaw in versions prior to 3.7.69.15 allows remote attackers to bypass authentication. Affected product: Samsung Smart Switch (data migration tool). Root cause: improper authentication check. Impact: attackers could gain unau...

CVE-2026-20998

Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...

CVE-2026-20996

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication...

CVE-2026-20995

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

CVE-2026-20995

Affected product: Smart Switch. The connected documents describe a vulnerability where exposure of sensitive functionality to an unauthorized actor exists in Smart Switch prior to version 3.7.69.15, enabling remote attackers to set a specific configuration. Root cause: improper access control tha...

CVE-2026-20995

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

CVE-2026-20994

URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token...

CVE-2026-20991

Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents...

CVE-2026-20991

Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents...

CVE-2026-20991

Summary: Connected data indicate two CVE-like entries involving ThemeManager with improper privilege management, allowing local attackers to reuse trial contents before SMR Mar‑2026 Release 1. The issue is described as local privilege escalation with content reuse; no CVE ID is given in those ent...

CVE-2026-20991

Improper privilege management in ThemeManager prior to SMR Mar-2026 Release 1 allows local privileged attackers to reuse trial contents...

CVE-2026-20989

Improper verification of cryptographic signature in Font Settings prior to SMR Mar-2026 Release 1 allows physical attackers to use custom font...

CVE-2026-20989

EUVD-2026-12295 and PT-2026-25594 describe improper verification of cryptographic signatures in Font Settings prior to SMR Mar-2026 Release 1, allowing physical attackers to load a custom font. Root cause: insufficient signature verification for font assets. The NC SC advisory confirms Google And...