← All advisories

Unrated severityNVD Advisory· Published Jul 10, 2026· Updated Jul 10, 2026

CVE-2026-21040

CVE-2026-21040

Description

Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs.

Affected products

1

Samsung Pay/Samsung Payllm-fuzzy
Range: < SMR Jul-2026 Release 1

Patches

Vulnerability mechanics

References

1

security.samsungmobile.com/securityUpdate.smsbmitre

News mentions

0

No linked articles in our index yet.

CVE-2026-21040 · VYPR