Skip to content
SamsungCVE-2026-21083

Samsung Smart Switch: improper input validation

Medium6.8CVE-2026-21083 · Published Aug 10, 2026 · updated Aug 19, 2026

Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.

Samsung advisory

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.
Details and references
CVSS 4.0
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-20

More Samsung advisories

All Samsung
Advisory
Samsung SmartThings: improper access control
Medium6.9Aug 10
Samsung My Galaxy: improper authorization
Medium5.3Aug 10
Samsung Health: improper authorization
Medium6.9Aug 10
Samsung Health: improper authorization
Medium6.9Aug 10
Samsung: insufficient authenticity check
Medium4.7Aug 10
Samsung Smart Switch: missing encryption
High7.0Aug 10

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.