CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

CVE-2026-21078

CVE-2026-21078 affects Samsung Smart Switch in trouble scanning mode prior to 3.7.72.6. The issue is insufficient verification of data authenticity, allowing adjacent attackers to spoof device identity. According to the provided metrics, the exploit requires only low privileges and exists an acti...

EUVD-2026-55103

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

CVE-2026-21078

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

PT-2026-69411

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.72.6 Description Improper input validation allows adjacent attackers to access sensitive data. Recommendations Update to version 3.7.72.6 or later...

CVE-2026-21083: Improper Input Validation

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21080: Cleartext Storage of Sensitive Information

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data...

CVE-2026-21079: Missing Encryption of Sensitive Data

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data...

PT-2026-69408

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.72.6 Description Sensitive information is stored in cleartext, which allows adjacent attackers to access this data. Recommendations Update to version 3.7.72.6 or later...

CVE-2026-72580: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch. The /mute and /unmute endpoint handlers in api/main.py pass the user-supplied silent query parameter directl...

PT-2026-69406

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.72.6 Description Insufficient verification of data authenticity in the trouble scanning mode allows adjacent attackers to spoof device identity. Recommendations Update to version 3.7.72.6 or later...

CVE-2026-21078: Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...

PT-2026-69407

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.72.6 Description Sensitive data is transmitted without encryption, which allows adjacent attackers to intercept the information. Recommendations Update to version 3.7.72.6 or later...

PT-2026-69464

Name of the Vulnerable Software and Affected Versions duhow/xiaoai-patch versions prior to commit fb07049 Description An OS command injection flaw allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers. The issue occurs because the /mute and /unmute endpoints in...

OnionHop v3.7.10

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

CVE-2026-71558

A heap type confusion vulnerability exists in Apache Fory C++ versions 0.14.0 before 1.5.0 . The root cause is a failure to properly validate type compatibility during polymorphic smart-pointer deserialization , which allows a crafted input payload to force the system to treat an incompatible obj...

OnionHop v3.7.9

OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...

EUVD-2026-54309

ICS-Park Smart Park Management System v2.0 contains an unrestricted file upload vulnerability in the file upload module. This allows a remote attacker to execute arbitrary code...

CVE-2026-15570: Server-Side Request Forgery (SSRF)

An improper restriction of URL schemes and destinations in the SmartCenter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker with access to the same local network to cause the embedded browser to issue...