CVE-2026-20997

CVE-2026-20997 concerns an improper verification of the cryptographic signature in Samsung Smart Switch before version 3.7.69.15, which could allow remote attackers to bypass authentication. The root cause is a flaw in the signature verification mechanism within the Smart Switch authentication fl...

CVE-2026-20997

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication...

CVE-2026-20996

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication...

CVE-2026-20996

CVE-2026-20996 affects Smart Switch prior to version 3.7.69.15, where use of a broken or risky cryptographic algorithm enables remote attackers to downgrade the authentication scheme. The issue is documented across multiple sources (CVE/NVD and Red Hat EUVD/AKB entries) and is tied to the downgra...

CVE-2026-20996

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication...

CVE-2026-20996

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication...

CVE-2026-20995

Affected product: Smart Switch. The connected documents describe a vulnerability where exposure of sensitive functionality to an unauthorized actor exists in Smart Switch prior to version 3.7.69.15, enabling remote attackers to set a specific configuration. Root cause: improper access control tha...

CVE-2026-20995

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

CVE-2026-20995

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

CVE-2026-20995

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration...

PT-2026-25600

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description Exposure of sensitive functionality to an unauthorized actor allows remote attackers to set a specific configuration. Recommendations Update to version 3.7.69.15 or later...

PT-2026-25603

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description A flaw exists in authentication within Smart Switch that enables remote attackers to circumvent security measures. This issue allows unauthorized access, potentially compromising system...

PT-2026-25601

Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.69.15 Description The use of a broken or risky cryptographic algorithm in Smart Switch allows remote attackers to configure a downgraded scheme for authentication. Recommendations Update Smart Switch to versi...

CVE-2026-21005: Undefined Security Weakness

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege...

CVE-2026-21004: Undefined Security Weakness

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service...

CVE-2026-20998: Undefined Security Weakness

Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication...

CVE-2026-20997: Undefined Security Weakness

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication...

CVE-2026-20996: Undefined Security Weakness

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication...

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of SAMSUNG Smart Switch prior to 3.7.69.15 contained security vulnerabilities. These vulnerabilities were caused by replay attacks that allowed authentication bypasses, potentially allowing remo...

SAMSUNG Smart Switch 安全漏洞

SAMSUNG Smart Switch is a data migration tool developed by South Korea’s Samsung Corporation. Versions of SAMSUNG Smart Switch prior to 3.7.69.15 contained security vulnerabilities. These vulnerabilities were due to improper authentication procedures, and they could allow adjacent attackers to...