CVE-2026-21136: Samsung Mobile Smart Switch

Medium severity, CVSS 6.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.

Affected products

• Samsung Mobile Smart Switch: before 3.7.73 (fixed in 3.7.73)

Published 2026-10-12. Last modified 2026-10-15.