Insufficient Data Authenticity Verification in Samsung Smart Switch
CVE-2026-21138

6.9MEDIUM

Key Information:

Vendor

Samsung
Status
Smart Switch
Vendor
CVE Published:
12 October 2026

What is CVE-2026-21138?

A vulnerability in Samsung Smart Switch prior to version 3.7.73 occurs due to insufficient verification of data authenticity. This flaw allows physical attackers to exploit the application and potentially install arbitrary applications on devices. Users should ensure they are using the latest version to mitigate these risks and protect their devices from unauthorized access.

Affected Version(s)

Smart Switch 3.7.73

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.