EUVD-2026-21816Severity by source
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionCVE.org
Improper input validation in data related to network restrictions prior to SMR Apr-2026 Release 1 allows physical attackers to bypass the restrictions.
AnalysisAI
Improper input validation in Samsung Mobile devices prior to SMR April 2026 Release 1 allows physical attackers to bypass network restrictions without authentication. The vulnerability affects data handling related to network restriction policies, enabling unauthorized modification of network access controls. CVSS score of 5.2 reflects the physical attack requirement, though integrity and availability impacts are rated high for affected functions.
Technical ContextAI
This vulnerability stems from insufficient input validation in network restriction enforcement mechanisms within Samsung Mobile operating systems. The CVE targets policy data structures responsible for enforcing network access controls, likely in the Android framework or Samsung Knox security layer. Physical attack vector (AV:P) indicates the attacker requires direct device access to exploit the flaw, suggesting the vulnerability may involve bypassing boot-time verification, secure storage validation, or device configuration parsing. The CWE classification is not specified in available data, limiting identification of the exact validation class (e.g., CWE-20: Improper Input Validation, or CWE-434: Unrestricted Upload), but the mechanism involves manipulation of network restriction data prior to enforcement.
RemediationAI
Primary fix: Update affected Samsung Mobile devices to SMR April 2026 Release 1 or later, which contains the input validation correction for network restriction data. Consult Samsung's official security update bulletin at https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04 for exact version numbers, device compatibility, and over-the-air update availability. In interim, enforce strict physical device security controls including device lock policies, restricted physical access to devices, and endpoint management policies that prevent unauthorized configuration changes. Verify that network restriction policies are reapplied and validated after device updates to ensure enforcement integrity.
More in Samsung Mobile Devices
View allOut-of-bounds write in Samsung's Keymaster trustlet - a Trusted Execution Environment (TEE) component running in ARM Tru
Local privilege escalation to root in Samsung's DualDAR (Dual Data-at-Rest) encryption component affects Samsung mobile
Remote code execution in Samsung Mobile Devices arises from a heap-based buffer overflow in the JPEG decoding path of li
Remote code execution in the DNG (Adobe Digital Negative) image decoder within Samsung's Quram imaging library (libimage
Path traversal in Samsung's ImsService (IP Multimedia Subsystem Service) on Android 14 through 17 permits remote unauthe
Out-of-bounds write in libmdnie.so on Samsung Mobile Devices running Android 15, 16, and 17 enables local attackers to e
Local privilege escalation in Samsung Galaxy Watch allows unprivileged local attackers to execute arbitrary code with sy
Stack-based buffer overflow in libril_sem.so - Samsung's Radio Interface Layer shared library - enables privileged local
Improper input validation in Samsung's DualDAR kernel driver enables a local privileged attacker to escalate privileges
We need to produce a comprehensive analysis for CVE-2026-21047. Let's gather all provided data: CVE ID, description: "Ou
Google's Secure Folder prior to the March 2026 SMR release improperly exports Android application components, enabling l
Heap buffer overflow in Samsung KnoxVault trustlet (hwvault trusted application) on Samsung Mobile Devices prior to SMR
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today