{"schema_version":1,"title":"Samsung Smart Switch vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 12 vulnerabilities in Samsung Smart Switch: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-21138, was published on 12 October 2026. 3 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/smart-switch","json_url":"https://junglewise.ai/threats/technologies/smart-switch.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/smart-switch","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":4,"all_time":12,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":3,"last_365_days":7},"latest":[{"cve":"CVE-2026-21138","epss":0.001,"slug":"cve-2026-21138-insufficient-verification-of-data-authenticity-in-smart-switch","title":"Samsung Smart Switch improper authorization in app installation","severity":"info","exploited":false,"published_at":"2026-10-12T05:17:02.63+00:00","url":"https://junglewise.ai/threats/cve-2026-21138-insufficient-verification-of-data-authenticity-in-smart-switch"},{"cve":"CVE-2026-21137","epss":0.0017,"slug":"cve-2026-21137-path-traversal-in-smart-switch-prior-to-version-3-7-73-allows","title":"Samsung Smart Switch arbitrary application installation via physical access","severity":"info","exploited":false,"published_at":"2026-10-12T05:17:02.507+00:00","url":"https://junglewise.ai/threats/cve-2026-21137-path-traversal-in-smart-switch-prior-to-version-3-7-73-allows"},{"cve":"CVE-2026-21136","epss":0.0014,"slug":"cve-2026-21136-improper-authorization-in-smart-switch-prior-to-version-3-7-73","title":"Samsung Smart Switch improper authorization allows app installation","severity":"info","exploited":false,"published_at":"2026-10-12T05:17:02.393+00:00","url":"https://junglewise.ai/threats/cve-2026-21136-improper-authorization-in-smart-switch-prior-to-version-3-7-73"},{"cve":"CVE-2026-21083","cvss":6.5,"epss":0.0026,"slug":"cve-2026-21083-improper-input-validation-in-smart-switch-prior-to-version-3-7-72","title":"Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:22.043+00:00","url":"https://junglewise.ai/threats/cve-2026-21083-improper-input-validation-in-smart-switch-prior-to-version-3-7-72"},{"cve":"CVE-2026-21080","cvss":6.5,"epss":0.0017,"slug":"cve-2026-21080-cleartext-storage-of-sensitive-information-in-smart-switch-prior","title":"Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:21.677+00:00","url":"https://junglewise.ai/threats/cve-2026-21080-cleartext-storage-of-sensitive-information-in-smart-switch-prior"},{"cve":"CVE-2026-21079","cvss":6.5,"epss":0.001,"slug":"cve-2026-21079-missing-encryption-of-sensitive-data-in-smart-switch-prior-to","title":"Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:21.55+00:00","url":"https://junglewise.ai/threats/cve-2026-21079-missing-encryption-of-sensitive-data-in-smart-switch-prior-to"},{"cve":"CVE-2026-21078","cvss":6.5,"epss":0.0016,"slug":"cve-2026-21078-insufficient-verification-of-data-authenticity-in-smart-switch","title":"Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows…","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:21.407+00:00","url":"https://junglewise.ai/threats/cve-2026-21078-insufficient-verification-of-data-authenticity-in-smart-switch"},{"cve":"CVE-2025-21078","cvss":8.8,"epss":0.0023,"slug":"cve-2025-21078-use-of-insufficiently-random-value-of-secretkey-in-smart-switch","title":"Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to…","severity":"high","exploited":false,"published_at":"2025-11-05T06:15:34.103+00:00","url":"https://junglewise.ai/threats/cve-2025-21078-use-of-insufficiently-random-value-of-secretkey-in-smart-switch"},{"cve":"CVE-2025-21064","cvss":8.8,"epss":0.0027,"slug":"cve-2025-21064-improper-authentication-in-smart-switch-prior-to-version-3-7-66-6","title":"Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.","severity":"high","exploited":false,"published_at":"2025-10-10T07:15:42.637+00:00","url":"https://junglewise.ai/threats/cve-2025-21064-improper-authentication-in-smart-switch-prior-to-version-3-7-66-6"},{"cve":"CVE-2025-21062","cvss":7.8,"epss":0.001,"slug":"cve-2025-21062-use-of-a-broken-or-risky-cryptographic-algorithm-in-smart-switch","title":"Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to…","severity":"high","exploited":false,"published_at":"2025-10-10T07:15:42.333+00:00","url":"https://junglewise.ai/threats/cve-2025-21062-use-of-a-broken-or-risky-cryptographic-algorithm-in-smart-switch"},{"cve":"CVE-2025-21061","cvss":7.1,"epss":0.001,"slug":"cve-2025-21061-cleartext-storage-of-sensitive-information-in-smart-switch-prior","title":"Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access…","severity":"high","exploited":false,"published_at":"2025-10-10T07:15:42.147+00:00","url":"https://junglewise.ai/threats/cve-2025-21061-cleartext-storage-of-sensitive-information-in-smart-switch-prior"},{"cve":"CVE-2025-21060","cvss":5.5,"epss":0.001,"slug":"cve-2025-21060-cleartext-storage-of-sensitive-information-in-smart-switch-prior","title":"Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access…","severity":"medium","exploited":false,"published_at":"2025-10-10T07:15:41.973+00:00","url":"https://junglewise.ai/threats/cve-2025-21060-cleartext-storage-of-sensitive-information-in-smart-switch-prior"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Samsung Exynos 1380","slug":"exynos-1380","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1380"},{"name":"Samsung Exynos 1480","slug":"exynos-1480","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1480"},{"name":"Samsung Exynos 1580","slug":"exynos-1580","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1580"},{"name":"Samsung Exynos 2400","slug":"exynos-2400","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/exynos-2400"},{"name":"Samsung Exynos 1330","slug":"exynos-1330","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/exynos-1330"},{"name":"Samsung Escargot","slug":"escargot","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/escargot"},{"name":"Samsung Exynos 2500","slug":"exynos-2500","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/exynos-2500"},{"name":"Samsung Exynos 1280","slug":"exynos-1280","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/exynos-1280"},{"name":"Samsung Exynos 2200","slug":"exynos-2200","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/exynos-2200"},{"name":"Samsung Exynos W920","slug":"exynos-w920","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/exynos-w920"},{"name":"Samsung Exynos 850","slug":"exynos-850","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/exynos-850"},{"name":"Samsung Exynos W930","slug":"exynos-w930","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/exynos-w930"}],"technology":{"hub":true,"name":"Samsung Smart Switch","slug":"smart-switch","vendor":{"hub":true,"name":"Samsung","slug":"samsung","url":"https://junglewise.ai/threats/vendors/samsung"},"aliases":[],"category":"mobile application","homepage":"https://www.samsung.com/","description":"Samsung mobile application for smart device control and management.","url":"https://junglewise.ai/threats/technologies/smart-switch"},"most_severe":[{"cve":"CVE-2025-21064","cvss":8.8,"epss":0.0027,"slug":"cve-2025-21064-improper-authentication-in-smart-switch-prior-to-version-3-7-66-6","title":"Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.","severity":"high","exploited":false,"published_at":"2025-10-10T07:15:42.637+00:00","url":"https://junglewise.ai/threats/cve-2025-21064-improper-authentication-in-smart-switch-prior-to-version-3-7-66-6"},{"cve":"CVE-2025-21078","cvss":8.8,"epss":0.0023,"slug":"cve-2025-21078-use-of-insufficiently-random-value-of-secretkey-in-smart-switch","title":"Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to…","severity":"high","exploited":false,"published_at":"2025-11-05T06:15:34.103+00:00","url":"https://junglewise.ai/threats/cve-2025-21078-use-of-insufficiently-random-value-of-secretkey-in-smart-switch"},{"cve":"CVE-2025-21062","cvss":7.8,"epss":0.001,"slug":"cve-2025-21062-use-of-a-broken-or-risky-cryptographic-algorithm-in-smart-switch","title":"Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to…","severity":"high","exploited":false,"published_at":"2025-10-10T07:15:42.333+00:00","url":"https://junglewise.ai/threats/cve-2025-21062-use-of-a-broken-or-risky-cryptographic-algorithm-in-smart-switch"},{"cve":"CVE-2025-21061","cvss":7.1,"epss":0.001,"slug":"cve-2025-21061-cleartext-storage-of-sensitive-information-in-smart-switch-prior","title":"Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access…","severity":"high","exploited":false,"published_at":"2025-10-10T07:15:42.147+00:00","url":"https://junglewise.ai/threats/cve-2025-21061-cleartext-storage-of-sensitive-information-in-smart-switch-prior"},{"cve":"CVE-2026-21083","cvss":6.5,"epss":0.0026,"slug":"cve-2026-21083-improper-input-validation-in-smart-switch-prior-to-version-3-7-72","title":"Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:22.043+00:00","url":"https://junglewise.ai/threats/cve-2026-21083-improper-input-validation-in-smart-switch-prior-to-version-3-7-72"},{"cve":"CVE-2026-21080","cvss":6.5,"epss":0.0017,"slug":"cve-2026-21080-cleartext-storage-of-sensitive-information-in-smart-switch-prior","title":"Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:21.677+00:00","url":"https://junglewise.ai/threats/cve-2026-21080-cleartext-storage-of-sensitive-information-in-smart-switch-prior"},{"cve":"CVE-2026-21078","cvss":6.5,"epss":0.0016,"slug":"cve-2026-21078-insufficient-verification-of-data-authenticity-in-smart-switch","title":"Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows…","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:21.407+00:00","url":"https://junglewise.ai/threats/cve-2026-21078-insufficient-verification-of-data-authenticity-in-smart-switch"},{"cve":"CVE-2026-21079","cvss":6.5,"epss":0.001,"slug":"cve-2026-21079-missing-encryption-of-sensitive-data-in-smart-switch-prior-to","title":"Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.","severity":"medium","exploited":false,"published_at":"2026-08-10T09:17:21.55+00:00","url":"https://junglewise.ai/threats/cve-2026-21079-missing-encryption-of-sensitive-data-in-smart-switch-prior-to"},{"cve":"CVE-2025-21060","cvss":5.5,"epss":0.001,"slug":"cve-2025-21060-cleartext-storage-of-sensitive-information-in-smart-switch-prior","title":"Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access…","severity":"medium","exploited":false,"published_at":"2025-10-10T07:15:41.973+00:00","url":"https://junglewise.ai/threats/cve-2025-21060-cleartext-storage-of-sensitive-information-in-smart-switch-prior"},{"cve":"CVE-2026-21137","epss":0.0017,"slug":"cve-2026-21137-path-traversal-in-smart-switch-prior-to-version-3-7-73-allows","title":"Samsung Smart Switch arbitrary application installation via physical access","severity":"info","exploited":false,"published_at":"2026-10-12T05:17:02.507+00:00","url":"https://junglewise.ai/threats/cve-2026-21137-path-traversal-in-smart-switch-prior-to-version-3-7-73-allows"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}