CVE-2026-21013

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information

Medium · published April 13, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
0.5
In the wild
Unconfirmed
What it is

Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00093 · 0.5th percentile
Published
2026-04-13T05:04Z
EPSS history
Timeline
  • 13 APR 05:04Z
    Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information
    cvelistv5