Which versions of Jwt Attack are affected by CVE-2026-21002?

Organizations using Galaxy Store should be aware of moderate risk from CVE-2026-21002 rated CVSS 5.9. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2026-21002?

Within 30 days: Identify affected systems running Galaxy Store and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Jwt Attack CVE-2026-21002

Q: What is the CVSS score of CVE-2026-21002?

CVE-2026-21002 has a CVSS 4.0 base score of 5.9 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-12321 MEDIUM

Improper Verification of Cryptographic Signature (CWE-347)

2026-03-16 SamsungMobile

Information Disclosure Jwt Attack

5.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 05:00 euvd

EUVD-2026-12321

Analysis Generated

Mar 16, 2026 - 05:00 vuln.today

CVE Published

Mar 16, 2026 - 04:32 nvd

MEDIUM 5.9

DescriptionCVE.org

Improper verification of cryptographic signature in Galaxy Store prior to version 4.6.03.8 allows local attacker to install arbitrary application.

AnalysisAI

Galaxy Store prior to version 4.6.03.8 contains an improper cryptographic signature verification vulnerability that allows a local attacker to install arbitrary applications without proper authorization. An attacker with physical or local access to a device can bypass the signature validation mechanism, enabling installation of malicious or unauthorized apps. While the CVSS score of 5.9 is moderate, the integrity impact is high, making this a meaningful threat to device security and app ecosystem integrity.

Technical ContextAI

This vulnerability exists in the cryptographic signature verification mechanism of Samsung Galaxy Store, the primary application distribution platform for Samsung Android devices. The root cause falls under improper cryptographic signature verification, where the application installer fails to properly validate digital signatures on application packages before installation. The affected component is responsible for authenticating application provenance and integrity through PKI-based signature schemes. Samsung Galaxy Store versions prior to 4.6.03.8 (CPE identifier likely cpe:2.3:a:samsung:galaxy_store) contain flawed validation logic that does not adequately verify signatures against trusted certificate authorities or allows signature verification to be bypassed through local manipulation. This is a classic implementation flaw in cryptographic controls where the validation checks are either incomplete, can be circumvented, or are performed at the wrong stage of the installation pipeline.

RemediationAI

Update Samsung Galaxy Store to version 4.6.03.8 or later immediately. This patch addresses the improper signature verification flaw and restores the integrity of the application installation process. Users should enable automatic updates for Galaxy Store if available through Samsung settings or manually check for updates via the Galaxy Store app itself or Samsung Members app. As an interim control pending patching, restrict local user account creation on shared devices, disable installation from unknown sources if not required, and review installed applications for suspicious or unexpected entries. Device administrators managing Samsung devices in enterprise environments should use Samsung Knox and Mobile Device Management (MDM) solutions to enforce app whitelisting and restrict Galaxy Store access to validated catalogs.