CVE-2026-21137: Path Traversal

Q: Who is realistically exposed to this issue?

Systems running Samsung Smart Switch versions earlier than 3.7.73 are exposed when an attacker has physical access to the system.

Q: What level of access does an attacker need to exploit it?

The issue requires physical access. No prior privileges or user interaction are required according to the supplied CVSS vector.

Q: What could an attacker gain through successful exploitation?

An attacker could access files using Smart Switch privileges. The reported impact is integrity-focused; no confidentiality or availability impact is specified.

Q: How can I determine whether I am affected?

Check the installed Samsung Smart Switch version. Versions prior to 3.7.73 are affected.

Published Oct 12, 2026

Updated

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

Affected Software

1 affected component

Samsung Smart Switch<3.7.73

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Smart Switch to a version that resolves this vulnerability.
Fixed in 3.7.73

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Data Sourced

via NVD·05:17 AM

DescriptionSeverity

Frequently Asked Questions

Who is realistically exposed to this issue?

Systems running Samsung Smart Switch versions earlier than 3.7.73 are exposed when an attacker has physical access to the system.

What level of access does an attacker need to exploit it?

The issue requires physical access. No prior privileges or user interaction are required according to the supplied CVSS vector.

What could an attacker gain through successful exploitation?

An attacker could access files using Smart Switch privileges. The reported impact is integrity-focused; no confidentiality or availability impact is specified.

How can I determine whether I am affected?

Check the installed Samsung Smart Switch version. Versions prior to 3.7.73 are affected.

CVE-2026-21137: Path Traversal

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need to exploit it?

What could an attacker gain through successful exploitation?

How can I determine whether I am affected?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need to exploit it?

What could an attacker gain through successful exploitation?

How can I determine whether I am affected?