AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SamsungCVE-2026-21078

Samsung: insufficient authenticity check

Samsung

CVE-2026-21078 · Published Aug 10, 2026 · updated Aug 19, 2026

Medium4.7
No fix yet
Samsung advisory

Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-345

More Samsung advisories

All Samsung
Medium 6.8Aug 10Samsung Smart Switch: improper input validationCVE-2026-21083no fix yetMedium 6.9Aug 10Samsung SmartThings: improper access controlCVE-2026-21084no fix yetMedium 5.3Aug 10Samsung My Galaxy: improper authorizationCVE-2026-21075no fix yetMedium 6.9Aug 10Samsung Health: improper authorizationCVE-2026-21076no fix yetMedium 6.9Aug 10Samsung Health: improper authorizationCVE-2026-21077no fix yetHigh 7.0Aug 10Samsung Smart Switch: missing encryptionCVE-2026-21079no fix yet