Authentication Bypass Vulnerability in Samsung Smart Switch
CVE-2026-20999

7.1HIGH

Key Information:

Vendor

Samsung
Status
Smart Switch
Vendor
CVE Published:
16 March 2026

What is CVE-2026-20999?

The vulnerability in Samsung Smart Switch, found in versions prior to 3.7.69.15, allows remote attackers to execute privileged functions by exploiting an authentication bypass through replay attacks. This security flaw poses significant risks, enabling unauthorized access to sensitive capabilities within the software.

Affected Version(s)

Smart Switch 3.7.69.15

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.