CVE-2026-21138: Samsung Mobile Smart Switch

Medium severity, CVSS 6.9. EPSS: 0.1% chance of exploitation in the next 30 days.

Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.

Affected products

• Samsung Mobile Smart Switch: before 3.7.73 (fixed in 3.7.73)

Published 2026-10-12. Last modified 2026-10-15.