CVE-2026-21136: Medium severity Samsung Smart Switch vulnerability
Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Smart Switchto a version that resolves this vulnerability.Fixed in 3.7.73
Event History
Frequently Asked Questions
Who is exposed to this issue?
Devices running Samsung Smart Switch versions earlier than 3.7.73 are affected. Exploitation requires physical access, so remotely reachable systems are not indicated by the available information.
What does an attacker need to do to exploit it?
An attacker needs physical access to invoke the Smart Switch application restore process. No authentication or user interaction is required according to the CVSS vector.
Is a default installation affected?
The available information does not identify any configuration prerequisite. Smart Switch versions prior to 3.7.73 should be treated as affected.
What is the remediation?
Update Samsung Smart Switch to version 3.7.73 or later. If updating cannot be performed immediately, restrict physical access to devices where Smart Switch is installed.