CVE-2026-21117: Medium severity Samsung CocktailBarService vulnerability

Q: Who is exposed to this issue?

Devices running Samsung CocktailBarService before SMR Oct-2026 Release 1 are affected. Exploitation requires local access to the device.

Q: What does an attacker need to exploit it?

The attacker needs local access, but no privileges or user interaction are required according to the supplied CVSS vector.

Q: What is the impact of successful exploitation?

A local attacker could access sensitive information. The provided impact data indicates confidentiality impact only, with no stated integrity or availability impact.

Q: How can I remediate the issue?

Update to SMR Oct-2026 Release 1 or a later release that includes the fix.

Published Oct 12, 2026

Updated

Improper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local attackers to access sensitive information.

Affected Software

1 affected component

Samsung CocktailBarService<SMR Oct-2026 Release 1

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Data Sourced

via NVD·05:17 AM

DescriptionSeverity

Frequently Asked Questions

Who is exposed to this issue?

Devices running Samsung CocktailBarService before SMR Oct-2026 Release 1 are affected. Exploitation requires local access to the device.

What does an attacker need to exploit it?

The attacker needs local access, but no privileges or user interaction are required according to the supplied CVSS vector.

What is the impact of successful exploitation?

A local attacker could access sensitive information. The provided impact data indicates confidentiality impact only, with no stated integrity or availability impact.

How can I remediate the issue?

Update to SMR Oct-2026 Release 1 or a later release that includes the fix.

CVE-2026-21117: Medium severity Samsung CocktailBarService vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?

How can I remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What does an attacker need to exploit it?

What is the impact of successful exploitation?

How can I remediate the issue?