CVE-2026-21010
Medium
Low
Medium
High
Critical
6.6
CVSS Score
Vulnerability Description
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
CVSS Metrics
Common Vulnerability Scoring System
Vector String:
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
P
Attack Complexity
L
Privileges Required
L
User Interaction
N
Scope
U
Confidentiality
H
Integrity
H
Availability
H
Known Affected Software
3 configuration(s) from 1 vendor(s)
android
Version:
15.0
CPE:
cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*
android
Version:
16.0
CPE:
cpe:2.3:o:samsung:android:16.0:smr-nov-2025-r1:*:*:*:*:*:*
android
Version:
14.0
CPE:
cpe:2.3:o:samsung:android:14.0:smr-nov-2025-r1:*:*:*:*:*:*
This vulnerability affects 3 software configuration(s). Ensure you patch all affected systems.
Severity Details
6.6
out of 10.0
Medium
Key Information
- Published Date
- April 13, 2026
