CVE-2026-21013
Incorrect Default Permissions in Galaxy Wearable Allow Data Access
Publication date: 2026-04-13
Last updated on: 2026-04-16
Assigner: Samsung Mobile
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| samsung | galaxy_wearable | to 2.2.68.26 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-276 | During installation, installed file permissions are set to allow anyone to modify those files. |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Galaxy Wearable application to version 2.2.68.26 or later, as versions prior to this have incorrect default permissions that allow local attackers to access sensitive information.
Can you explain this vulnerability to me?
This vulnerability is due to incorrect default permissions in the Galaxy Wearable application prior to version 2.2.68.26. It allows local attackers to access sensitive information on the device.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing local attackers to gain unauthorized access to sensitive information stored or managed by the Galaxy Wearable application. This could lead to privacy breaches or misuse of personal data.