CVE-2026-20978
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-02-04

Last updated on: 2026-02-05

Assigner: Samsung Mobile

Description
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-02-04
Last Modified
2026-02-05
Generated
2026-05-07
AI Q&A
2026-02-04
EPSS Evaluated
2026-05-05
NVD
EUVD
Affected Vendors & Products
Showing 125 associated CPEs
Vendor Product Version / Range
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 13.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 14.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 15.0
samsung android 16.0
samsung android 16.0
samsung android 16.0
samsung android 16.0
samsung android 16.0
samsung android 16.0
samsung android 16.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-NVD-CWE-noinfo
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:

I don't know


What immediate steps should I take to mitigate this vulnerability?

I don't know


How can this vulnerability be detected on my network or system? Can you suggest some commands?

I don't know


Can you explain this vulnerability to me?

This vulnerability is an improper authorization issue in the KnoxGuardManager application prior to the SMR Feb-2026 Release 1. It allows local attackers to bypass the persistence configuration of the application, meaning they can circumvent controls that maintain certain settings or states within the app.


How can this vulnerability impact me? :

The impact of this vulnerability is that a local attacker with limited privileges could bypass the application's persistence configuration. This could lead to unauthorized changes or disruptions in the application's expected behavior, potentially affecting system stability or security.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart