CVE-2026-21117: Medium severity Samsung CocktailBarService vulnerability
Published Oct 12, 2026
·Updated
Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.
Affected Software
1 affected component
Samsung CocktailBarService<SMR Oct-2026 Release 1
Event History
Oct 12, 2026
CVE Published
via MITRE·04:57 AM
Data Sourced
via MITRE·04:57 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who is exposed to this issue?
Devices running Samsung CocktailBarService before SMR Oct-2026 Release 1 are affected. Exploitation requires local access to the device.
2
What does an attacker need to exploit it?
The attacker needs local access, but no privileges or user interaction are required according to the supplied CVSS vector.
3
What is the impact of successful exploitation?
A local attacker could access sensitive information. The provided impact data indicates confidentiality impact only, with no stated integrity or availability impact.
4
How can I remediate the issue?
Update to SMR Oct-2026 Release 1 or a later release that includes the fix.