CVE-2026-20995

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

CVE-2026-20995

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

CVE-2026-20995

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

Malicious code in typescript-vue-apollo-smart-ops (npm)

The package 'typescript-vue-apollo-smart-ops' is part of the PhantomRaven supply chain attack campaign Wave 2. It uses a Remote Dynamic Dependency RDD technique: the published package appears benign but includes a URL-based dependency in package.json pointing to an attacker-controlled C2 server...

PT-2026-25600

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description Exposure of sensitive functionality to an unauthorized actor allows remote attackers to set a specific configuration. Recommendations Update to version 3.7.69.15 or later...

PT-2026-25603

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description A flaw exists in authentication within Smart Switch that enables remote attackers to circumvent security measures. This issue allows unauthorized access, potentially compromising system...

PT-2026-25601

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description The use of a broken or risky cryptographic algorithm in Smart Switch allows remote attackers to configure a downgraded scheme for authentication. Recommendations Update Smart Switch to versi...

PT-2026-25602

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description Improper verification of a cryptographic signature in Smart Switch allows remote attackers to potentially bypass authentication. Recommendations Update Smart Switch to version 3.7.69.15 or...

CVE-2026-21004: Undefined Security Weakness

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service...

CVE-2026-20998: Undefined Security Weakness

Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of SAMSUNG Smart Switch prior to 3.7.69.15 contained security vulnerabilities. These vulnerabilities were caused by replay attacks that allowed authentication bypasses, potentially allowing remo...

SAMSUNG Smart Switch 安全漏洞

Samsung Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of Samsung Smart Switch prior to 3.7.69.15 contained security vulnerabilities. These vulnerabilities stemmed from improper encryption signature verification, which could allow remote attackers t...

SAMSUNG Smart Switch 安全漏洞

Samsung Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of Samsung Smart Switch prior to 3.7.69.15 contained security vulnerabilities. These vulnerabilities were due to improper authentication procedures, which could allow remote attackers to bypass...

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of SAMSUNG Smart Switch prior to 3.7.69.15 contained security vulnerabilities. These vulnerabilities stemmed from the use of defective or insecure encryption algorithms, which could allow remote...

SAMSUNG Smart Switch 安全漏洞

Samsung Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of Samsung Smart Switch prior to 3.7.69.15 contained a security vulnerability caused by a path traversal issue, which could allow adjacent attackers to overwrite any file with Smart Switch...

CVE-2026-20995: Undefined Security Weakness

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

CVE-2026-20997: Undefined Security Weakness

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication...

CVE-2026-20996: Undefined Security Weakness

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication...

CVE-2026-21005: Undefined Security Weakness

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege...

CVE-2026-20999: Undefined Security Weakness

Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions...