Smart Switch CVE-2026-20999

Smart Switch versions prior to 3.7.69.15 with session replay vulnerability. Attacker must obtain valid authentication token from prior legitimate session, then reuse it. User interaction required to initially generate valid token.

Despite the high CVSS score of 7.1, several factors moderate the real-world risk. The attack requires user interaction (UI:P) which significantly limits automated exploitation potential. No EPSS score is available to indicate exploitation probability, and the vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog. No proof-of-concept code has been published. The attack complexity is low (AC:L) and requires no privileges (PR:N), but the user interaction requirement makes mass exploitation less likely. This appears to be a moderate-priority issue rather than critical, suitable for regular patching cycles rather than emergency response.

An attacker on the same network as a Smart Switch user could capture authentication traffic during a legitimate session, then replay those credentials to access privileged functions within the application. This would require the attacker to position themselves to intercept network traffic and wait for a user to initiate a Smart Switch session, making targeted attacks more feasible than mass exploitation.