CVE-2026-21078CWE-345

CVE-2026-21078

Medium · published August 10, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
4.6
In the wild
Unconfirmed
What it is

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.6th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2026-08-10T13:17Z
Affected products (1)
ProductVersionsFixed in
samsung/smart_switch< 3.7.72.63.7.72.6
References (1)
https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08 · [email protected]
EPSS history
Timeline
  • 10 AUG 07:43Z
    Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device…
    cvelistv5