CVE-2026-18058: High severity Smart Connect dashboard UI vulnerability
The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps. When paired with a phishing attack, this manipulation could result in escalated privileges of an attacker within the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SmartConnectto a version that resolves this vulnerability.Fixed in 9.03.00.61 - Compensating control
Ensure the latest monthly security patches are installed for the SmartConnect device (device-specific monthly security patching).
Event History
Frequently Asked Questions
What would an attacker need to exploit this issue?
Exploitation requires local access, low-level privileges, and user interaction. The issue also depends on a phishing attack paired with manipulation by a third-party app.
Who is most exposed?
Users of the Smart Connect dashboard UI who can be targeted by phishing and have a malicious or manipulated third-party app on the device are the relevant exposure group. The provided information does not establish that remote, unauthenticated attackers can exploit it.
What is the potential impact after successful exploitation?
A successful attack could escalate the attacker's privileges within the system. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability, with scope changed.