CVE-2026-21005

< 3.7.69.15

Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch

6.5MEDIUM

CVE-2026-21004

< 3.7.69.15

Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.

6.5MEDIUM

CVE-2026-20999

< 3.7.69.15

Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions

7.5HIGH

CVE-2026-20998

< 3.7.69.15

Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.

9.8CRITICAL

CVE-2026-20997

< 3.7.69.15

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially

9.8CRITICAL

CVE-2026-20996

< 3.7.69.15

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a

5.3MEDIUM

CVE-2026-20995

< 3.7.69.15

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to

5.3MEDIUM

CVE-2025-21078

< 3.7.68.6

Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access back

8.8HIGH

CVE-2025-21064

< 3.7.67.2

Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.

8.8HIGH

CVE-2025-21062

< 3.7.67.2

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the r

7.8HIGH

CVE-2025-21061

< 3.7.67.2

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive da

7.1HIGH

CVE-2025-21060

< 3.7.67.2

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data

5.5MEDIUM

CVE-2025-20996

< 3.7.64.10

Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read d

5.0MEDIUM