CVE-2026-20995

Summary

Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileSmart Switch3.7.69.15unaffected

Weaknesses

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References