Samsung Mobile WLAN CVE-2026-21051

Q: What is the CVSS score of CVE-2026-21051?

CVE-2026-21051 has a CVSS 4.0 base score of 5.1 (Medium). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

EUVD-2026-42821 MEDIUM

2026-07-10 mobile.security@samsung.com

GHSA-87m6-fjwc-595h

Information Disclosure

5.1

CVSS 4.0 · Vendor: samsung

Severity by source

Vendor (samsung) PRIMARY

5.1 MEDIUM

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.1 MEDIUM

Local attack vector confirmed; no privileges required per vendor CVSS 4.0 data; limited C and I impact from settings exposure; no scope change or availability impact.

3.1 AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

4.0 AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (samsung).

CVSS VectorVendor: samsung

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 10, 2026 - 06:13 vuln.today

DescriptionCVE.org

Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release 1 allows local attackers to configure TencentWifiSecurity settings.

AnalysisAI

Incorrect default permissions in Samsung Mobile's WLAN security component expose TencentWifiSecurity settings to any local attacker on Android 14, 15, and 16 devices prior to SMR Jul-2026 Release 1. An unprivileged local user or application can read or modify TencentWifiSecurity configuration, resulting in limited information disclosure and integrity compromise of WiFi security settings. No public exploit code exists and this vulnerability is not listed in CISA KEV; however, the zero-privilege-required local access condition broadens practical exposure on shared, enterprise-managed, or already-compromised devices.

Technical ContextAI

The vulnerability resides in Samsung's WLAN security subsystem on Android 14, 15, and 16, specifically affecting the TencentWifiSecurity module - a WiFi security component integrated into Samsung firmware. No CWE is formally assigned, but the root cause is consistent with CWE-276 (Incorrect Default Permissions) or CWE-732 (Incorrect Permission Assignment for Critical Resource): file system paths, IPC endpoints, or shared preferences governing TencentWifiSecurity are accessible to unprivileged local processes due to misconfigured default permission masks. The CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N) confirms that exploitation is local, requires no privileges or user interaction, and produces low confidentiality and integrity impact confined to the vulnerable system. No specific CPE strings were provided in the intelligence data.

RemediationAI

Apply Samsung's Security Maintenance Release for July 2026 (SMR Jul-2026 Release 1), which corrects the default permission assignments on the TencentWifiSecurity settings interface across Android 14, 15, and 16. Updates are distributed via Samsung's over-the-air firmware update mechanism and the Samsung Security Update portal at https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=07. For enterprise environments where patching is delayed, MDM administrators should evaluate policies that restrict unprivileged application access to WLAN configuration interfaces, though no specific vendor-documented workaround to neutralize the permission flaw without the patch has been identified in the available data. Restricting side-loaded or untrusted application installation on affected devices reduces the likelihood of a malicious local actor reaching the vulnerable interface.