# Samsung Smart Switch vulnerabilities Source: https://junglewise.ai/threats/technologies/smart-switch Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/smart-switch.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 12 vulnerabilities in Samsung Smart Switch: 0 in the last 7 days and 3 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-21138, was published on 12 October 2026. 3 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 3 - All time: 12 (0 critical, 0 exploited in the wild) ## About Samsung Smart Switch Samsung mobile application for smart device control and management. ## Latest Samsung Smart Switch vulnerabilities - [CVE-2026-21138: Samsung Smart Switch improper authorization in app installation](https://junglewise.ai/threats/cve-2026-21138-insufficient-verification-of-data-authenticity-in-smart-switch) (info, published 12 Oct 2026) - [CVE-2026-21137: Samsung Smart Switch arbitrary application installation via physical access](https://junglewise.ai/threats/cve-2026-21137-path-traversal-in-smart-switch-prior-to-version-3-7-73-allows) (info, published 12 Oct 2026) - [CVE-2026-21136: Samsung Smart Switch improper authorization allows app installation](https://junglewise.ai/threats/cve-2026-21136-improper-authorization-in-smart-switch-prior-to-version-3-7-73) (info, published 12 Oct 2026) - [CVE-2026-21083: Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.](https://junglewise.ai/threats/cve-2026-21083-improper-input-validation-in-smart-switch-prior-to-version-3-7-72) (medium, CVSS 6.5, published 10 Aug 2026) - [CVE-2026-21080: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access…](https://junglewise.ai/threats/cve-2026-21080-cleartext-storage-of-sensitive-information-in-smart-switch-prior) (medium, CVSS 6.5, published 10 Aug 2026) - [CVE-2026-21079: Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept…](https://junglewise.ai/threats/cve-2026-21079-missing-encryption-of-sensitive-data-in-smart-switch-prior-to) (medium, CVSS 6.5, published 10 Aug 2026) - [CVE-2026-21078: Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows…](https://junglewise.ai/threats/cve-2026-21078-insufficient-verification-of-data-authenticity-in-smart-switch) (medium, CVSS 6.5, published 10 Aug 2026) - [CVE-2025-21078: Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to…](https://junglewise.ai/threats/cve-2025-21078-use-of-insufficiently-random-value-of-secretkey-in-smart-switch) (high, CVSS 8.8, published 5 Nov 2025) - [CVE-2025-21064: Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.](https://junglewise.ai/threats/cve-2025-21064-improper-authentication-in-smart-switch-prior-to-version-3-7-66-6) (high, CVSS 8.8, published 10 Oct 2025) - [CVE-2025-21062: Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to…](https://junglewise.ai/threats/cve-2025-21062-use-of-a-broken-or-risky-cryptographic-algorithm-in-smart-switch) (high, CVSS 7.8, published 10 Oct 2025) - [CVE-2025-21061: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access…](https://junglewise.ai/threats/cve-2025-21061-cleartext-storage-of-sensitive-information-in-smart-switch-prior) (high, CVSS 7.1, published 10 Oct 2025) - [CVE-2025-21060: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access…](https://junglewise.ai/threats/cve-2025-21060-cleartext-storage-of-sensitive-information-in-smart-switch-prior) (medium, CVSS 5.5, published 10 Oct 2025) ## Most severe Samsung Smart Switch vulnerabilities - [CVE-2025-21064: Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.](https://junglewise.ai/threats/cve-2025-21064-improper-authentication-in-smart-switch-prior-to-version-3-7-66-6) (high, CVSS 8.8, published 10 Oct 2025) - [CVE-2025-21078: Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to…](https://junglewise.ai/threats/cve-2025-21078-use-of-insufficiently-random-value-of-secretkey-in-smart-switch) (high, CVSS 8.8, published 5 Nov 2025) - [CVE-2025-21062: Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to…](https://junglewise.ai/threats/cve-2025-21062-use-of-a-broken-or-risky-cryptographic-algorithm-in-smart-switch) (high, CVSS 7.8, published 10 Oct 2025) - [CVE-2025-21061: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access…](https://junglewise.ai/threats/cve-2025-21061-cleartext-storage-of-sensitive-information-in-smart-switch-prior) (high, CVSS 7.1, published 10 Oct 2025) - [CVE-2026-21083: Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.](https://junglewise.ai/threats/cve-2026-21083-improper-input-validation-in-smart-switch-prior-to-version-3-7-72) (medium, CVSS 6.5, published 10 Aug 2026) - [CVE-2026-21080: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access…](https://junglewise.ai/threats/cve-2026-21080-cleartext-storage-of-sensitive-information-in-smart-switch-prior) (medium, CVSS 6.5, published 10 Aug 2026) - [CVE-2026-21078: Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows…](https://junglewise.ai/threats/cve-2026-21078-insufficient-verification-of-data-authenticity-in-smart-switch) (medium, CVSS 6.5, published 10 Aug 2026) - [CVE-2026-21079: Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept…](https://junglewise.ai/threats/cve-2026-21079-missing-encryption-of-sensitive-data-in-smart-switch-prior-to) (medium, CVSS 6.5, published 10 Aug 2026) - [CVE-2025-21060: Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access…](https://junglewise.ai/threats/cve-2025-21060-cleartext-storage-of-sensitive-information-in-smart-switch-prior) (medium, CVSS 5.5, published 10 Oct 2025) - [CVE-2026-21137: Samsung Smart Switch arbitrary application installation via physical access](https://junglewise.ai/threats/cve-2026-21137-path-traversal-in-smart-switch-prior-to-version-3-7-73-allows) (info, published 12 Oct 2026) ## Vulnerabilities per week 3 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 3 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Samsung technologies - [Samsung Exynos 1380](https://junglewise.ai/threats/technologies/exynos-1380): 37 vulnerabilities - [Samsung Exynos 1480](https://junglewise.ai/threats/technologies/exynos-1480): 37 vulnerabilities - [Samsung Exynos 1580](https://junglewise.ai/threats/technologies/exynos-1580): 37 vulnerabilities - [Samsung Exynos 2400](https://junglewise.ai/threats/technologies/exynos-2400): 33 vulnerabilities - [Samsung Exynos 1330](https://junglewise.ai/threats/technologies/exynos-1330): 30 vulnerabilities - [Samsung Escargot](https://junglewise.ai/threats/technologies/escargot): 28 vulnerabilities - [Samsung Exynos 2500](https://junglewise.ai/threats/technologies/exynos-2500): 27 vulnerabilities - [Samsung Exynos 1280](https://junglewise.ai/threats/technologies/exynos-1280): 25 vulnerabilities - [Samsung Exynos 2200](https://junglewise.ai/threats/technologies/exynos-2200): 20 vulnerabilities - [Samsung Exynos W920](https://junglewise.ai/threats/technologies/exynos-w920): 19 vulnerabilities - [Samsung Exynos 850](https://junglewise.ai/threats/technologies/exynos-850): 18 vulnerabilities - [Samsung Exynos W930](https://junglewise.ai/threats/technologies/exynos-w930): 18 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Samsung Smart Switch vulnerabilities", https://junglewise.ai/threats/technologies/smart-switch, 12 November 2026.