CVE-2026-21079CWE-311

CVE-2026-21079

Medium · published August 10, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00098 · 0.7th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2026-08-10T13:17Z
Affected products (1)
ProductVersionsFixed in
samsung/smart_switch< 3.7.72.63.7.72.6
References (1)
https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08 · [email protected]
EPSS history
Timeline
  • 10 AUG 07:43Z
    Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data
    cvelistv5