Improper Authorization in ProxyHandler Affects Samsung Products
CVE-2026-21086

4.8MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
9 September 2026

What is CVE-2026-21086?

The vulnerability in ProxyHandler allows local attackers to gain unauthorized access to proxy configuration settings. This issue arises from improper authorization mechanisms that could enable malicious users to exploit the system prior to the SMR Aug-2026 Release 1, potentially leading to security breaches within affected Samsung devices. Protecting against this vulnerability is vital to ensure the integrity and confidentiality of proxy functionalities.

Affected Version(s)

Samsung Mobile Devices SMR Sep-2026 Release in Android 14, 15, 16, 17

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.