EUVD-2026-97199

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

CVE-2026-21135

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

CVE-2026-21118

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

CVE-2026-21118

An improper access control vulnerability exists in the DownloadProvider component on devices prior to the SMR Oct-2026 Release 1 . This flaw allows local attackers to gain unauthorized access to files located within scoped storage . Exploitation details and specific exploit paths are not provided...

EUVD-2026-97182

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

CVE-2026-21118

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

CVE-2026-21117

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

CVE-2026-21117

An improper access control vulnerability exists in the CocktailBarService on Samsung Mobile devices. This flaw allows local attackers to access sensitive information . The vulnerability is present in versions prior to the SMR Oct-2026 Release 1 . No specific details regarding the root cause or ex...

EUVD-2026-97181

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

PT-2026-110463

Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information...

PT-2026-110445

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information...

PT-2026-110467

Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device...

PT-2026-110446

Improper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local attackers to access files in scoped storage...

PT-2026-110639

Name of the Vulnerable Software and Affected Versions hexpm hex versions 0.0.1 through 2.5.1 Description Improper neutralization of escape, meta, or control sequences allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix...

PT-2026-110496

Missing Authorization vulnerability in VillaTheme TMDS tmds-dropshipping-for-temu-and-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects TMDS: from n/a through 1.0.15...

PT-2026-110507

Missing Authorization vulnerability in Codection Products Restricted Users for WooCommerce woo-products-restricted-users allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Products Restricted Users for WooCommerce: from n/a through 0.7...

PT-2026-110500

Missing Authorization vulnerability in VideoWhisper.com VideoWhisper Site Manager for ChatGPT, Claude, Codex videowhisper-site-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VideoWhisper Site Manager for ChatGPT, Claude, Codex: from n/a through...

PT-2026-110498

Authorization Bypass Through User-Controlled Key vulnerability in NOUS Ouvert Utile et Simple Event post event-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Event post: from n/a through 6.1.1...

PT-2026-110506

Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP User Manager: from n/a through 2.9.22...

PT-2026-110508

Missing Authorization vulnerability in WP Desk Flexible Subscriptions flexible-subscriptions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flexible Subscriptions: from n/a through 1.8.4...