CVE-2025-20996

CVE-2025-20996: Improper authorization in Samsung Smart Switch (on non-Samsung devices) prior to version 3.7.64.10 allows a local attacker to read data with the privilege of Smart Switch. User interaction is required to trigger the vulnerability. Impact: confidentiality of data can be exposed; no...

CVE-2026-20999

EUVD-2026-12315 and PT-2026-25604 describe an authentication bypass by replay in Smart Switch prior to version 3.7.69.15, allowing remote attackers to trigger privileged functions. Affected: Smart Switch (pre-3.7.69.15). Root cause: replay attack bypasses authentication. Impact: remote triggering...

CVE-2026-20995

Affected product: Smart Switch. The connected documents describe a vulnerability where exposure of sensitive functionality to an unauthorized actor exists in Smart Switch prior to version 3.7.69.15, enabling remote attackers to set a specific configuration. Root cause: improper access control tha...

CVE-2025-21061

CVE-2025-21061 affects Samsung Smart Switch prior to 3.7.67.2. The issue is cleartext storage of sensitive data, enabling local attackers to access data. Trigger requires user interaction. Root cause: storing sensitive information in cleartext within the affected Smart Switch version. Impact note...

CVE-2025-21078

CVE-2025-21078 affects Samsung Smart Switch prior to version 3.7.68.6. The root cause is the use of an insufficiently random value for the secretKey, which could allow adjacent attackers to access application backups. Public sources in the connected documents consistently describe this impact and...

CVE-2025-21064

CVE-2025-21064 concerns Samsung Smart Switch. The issue is improper authentication in Smart Switch versions prior to 3.7.66.6, enabling nearby/adjacent attackers to access data being transferred. The vulnerability stems from weaknesses in the authentication process of the transfer feature. Affect...

CVE-2026-20996

CVE-2026-20996 affects Smart Switch prior to version 3.7.69.15, where use of a broken or risky cryptographic algorithm enables remote attackers to downgrade the authentication scheme. The issue is documented across multiple sources (CVE/NVD and Red Hat EUVD/AKB entries) and is tied to the downgra...

CVE-2026-20997

CVE-2026-20997 concerns an improper verification of the cryptographic signature in Samsung Smart Switch before version 3.7.69.15, which could allow remote attackers to bypass authentication. The root cause is a flaw in the signature verification mechanism within the Smart Switch authentication fl...

CVE-2025-21060

CVE-2025-21060 affects Samsung Smart Switch prior to version 3.7.67.2, where cleartext storage of sensitive information in backups allows local attackers to access application backup data after user interaction triggers the vulnerability. The underlying issue is the storage of backup data in clea...

CVE-2025-21062

The vulnerability CVE-2025-21062 affects Samsung Smart Switch, prior to version 3.7.67.2. The issue stems from use of a broken or risky cryptographic algorithm in the restoration process, allowing local attackers to replace the restoring application. Exploitation requires user interaction. Impact...

CVE-2026-21004

Observation: CVE-2026-21004 is a reserved candidate entry. The connected document EUVD-2026-12323 describes an issue in Smart Switch with improper authentication prior to version 3.7.69.15 , which allows adjacent attackers to trigger a denial of service . What is affected: Smart Switch devices ru...

CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. Affected product: Smart Switch (pre-3.7.69.15). Impact: potential unauthorized file overwrite; confidentiality unchanged, integrity/availability considerat...

CVE-2026-20998

CVE-2026-20998 concerns Samsung Smart Switch; an improper authentication flaw in versions prior to 3.7.69.15 allows remote attackers to bypass authentication. Affected product: Samsung Smart Switch (data migration tool). Root cause: improper authentication check. Impact: attackers could gain unau...