CVE-2026-21005

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege

High · published March 16, 2026

CVSS v4.0
7.1
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00246 · 15.0th percentile
Published
2026-03-16T04:35Z
EPSS history
Timeline
  • 16 MAR 04:35Z
    Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege
    cvelistv5