Paper/Archive/CVE-2026-20997

CVE-2026-20997

Samsung Mobile Smart Switch — Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass…

EPSS 0.3%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 18.6.186 × 203.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.

Affected

ProductAffectedFixed inSource

Smart Switchsee advisory3.7.69.15CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SamsungMobile (CNA)5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsecurity.samsungmobile.com/serviceWeb.smsb?year=2026&month=03