← All advisories

Medium severityNVD Advisory· Published Oct 12, 2026

CVE-2026-21121

CVE-2026-21121

Description

Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Samsung Pay/Samsung Payllm-fuzzy
Range: < SMR Oct-2026 Release 1

Patches

Vulnerability mechanics

References

1

security.samsungmobile.com/securityUpdate.smsbnvd

News mentions

0

No linked articles in our index yet.