Improper Access Control in Samsung Continuity Service for Windows
CVE-2026-21139

7.3HIGH

Key Information:

Vendor

Samsung
Status
Samsung Continuity Service For Windows
Vendor
CVE Published:
12 October 2026

What is CVE-2026-21139?

The Samsung Continuity Service for Windows, prior to version 4.6.1217.0, exhibits a flaw in access control mechanisms. This vulnerability enables adjacent attackers to potentially manipulate connected mobile devices, posing a security risk to users. Mitigation requires upgrading to the latest version of the Samsung Continuity Service to ensure proper access control and safeguard against unauthorized access and manipulation.

Affected Version(s)

Samsung Continuity Service for windows 4.6.1217.0

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.