CVE-2025-20996

CVE-2025-20996: Improper authorization in Samsung Smart Switch (on non-Samsung devices) prior to version 3.7.64.10 allows a local attacker to read data with the privilege of Smart Switch. User interaction is required to trigger the vulnerability. Impact: confidentiality of data can be exposed; no...

CVE-2026-20995

Affected product: Smart Switch. The connected documents describe a vulnerability where exposure of sensitive functionality to an unauthorized actor exists in Smart Switch prior to version 3.7.69.15, enabling remote attackers to set a specific configuration. Root cause: improper access control tha...

CVE-2026-21079

CVE-2026-21079 concerns Samsung Smart Switch prior to version 3.7.72.6, where missing encryption of sensitive data allows adjacent attackers to intercept transmitted data. The affected component is the Smart Switch data transmission flow; the root cause is lack of encryption for sensitive data in...

CVE-2026-21080

The CVE-2026-21080 affects Smart Switch prior to version 3.7.72.6. It stems from cleartext storage of sensitive information, allowing adjacent attackers to access data. Mitigation: upgrade to 3.7.72.6 or later (as described in the provided references).

CVE-2026-20999

EUVD-2026-12315 and PT-2026-25604 describe an authentication bypass by replay in Smart Switch prior to version 3.7.69.15, allowing remote attackers to trigger privileged functions. Affected: Smart Switch (pre-3.7.69.15). Root cause: replay attack bypasses authentication. Impact: remote triggering...

CVE-2026-21083

CVE-2026-21083 affects Samsung Smart Switch software with improper input validation in versions before 3.7.72.6, enabling adjacent attackers to access sensitive data (confidentiality impact high). The description indicates the vulnerability is fixed in 3.7.72.6 or later; update to that version or...

CVE-2026-21078

CVE-2026-21078 affects Samsung Smart Switch in trouble scanning mode prior to 3.7.72.6. The issue is insufficient verification of data authenticity, allowing adjacent attackers to spoof device identity. According to the provided metrics, the exploit requires only low privileges and exists an acti...

CVE-2026-21004

Observation: CVE-2026-21004 is a reserved candidate entry. The connected document EUVD-2026-12323 describes an issue in Smart Switch with improper authentication prior to version 3.7.69.15 , which allows adjacent attackers to trigger a denial of service . What is affected: Smart Switch devices ru...

CVE-2026-20996

CVE-2026-20996 affects Smart Switch prior to version 3.7.69.15, where use of a broken or risky cryptographic algorithm enables remote attackers to downgrade the authentication scheme. The issue is documented across multiple sources (CVE/NVD and Red Hat EUVD/AKB entries) and is tied to the downgra...

CVE-2025-21061

CVE-2025-21061 affects Samsung Smart Switch prior to 3.7.67.2. The issue is cleartext storage of sensitive data, enabling local attackers to access data. Trigger requires user interaction. Root cause: storing sensitive information in cleartext within the affected Smart Switch version. Impact note...

CVE-2025-21064

CVE-2025-21064 concerns Samsung Smart Switch. The issue is improper authentication in Smart Switch versions prior to 3.7.66.6, enabling nearby/adjacent attackers to access data being transferred. The vulnerability stems from weaknesses in the authentication process of the transfer feature. Affect...

CVE-2025-21078

CVE-2025-21078 affects Samsung Smart Switch prior to version 3.7.68.6. The root cause is the use of an insufficiently random value for the secretKey, which could allow adjacent attackers to access application backups. Public sources in the connected documents consistently describe this impact and...

CVE-2026-20997

CVE-2026-20997 concerns an improper verification of the cryptographic signature in Samsung Smart Switch before version 3.7.69.15, which could allow remote attackers to bypass authentication. The root cause is a flaw in the signature verification mechanism within the Smart Switch authentication fl...

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. Affected product: Smart Switch (pre-3.7.69.15). Impact: potential unauthorized file overwrite; confidentiality unchanged, integrity/availability considerat...

CVE-2026-20998

CVE-2026-20998 concerns Samsung Smart Switch; an improper authentication flaw in versions prior to 3.7.69.15 allows remote attackers to bypass authentication. Affected product: Samsung Smart Switch (data migration tool). Root cause: improper authentication check. Impact: attackers could gain unau...

CVE-2025-21060

CVE-2025-21060 affects Samsung Smart Switch prior to version 3.7.67.2, where cleartext storage of sensitive information in backups allows local attackers to access application backup data after user interaction triggers the vulnerability. The underlying issue is the storage of backup data in clea...

CVE-2025-21062

The vulnerability CVE-2025-21062 affects Samsung Smart Switch, prior to version 3.7.67.2. The issue stems from use of a broken or risky cryptographic algorithm in the restoration process, allowing local attackers to replace the restoring application. Exploitation requires user interaction. Impact...