CVE-2026-21044
Received Received - Intake

Improper Authorization in KnoxGuardManager

Publication date: 2026-07-10

Last updated on: 2026-07-10

Assigner: Samsung Mobile

Description
Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-10
Last Modified
2026-07-10
Generated
2026-07-10
AI Q&A
2026-07-10
EPSS Evaluated
N/A
NVD
CVE-2026-21044
EUVD
EUVD-2026-42815

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
samsung knoxguardmanager to 1 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper authorization in the KnoxGuardManager application prior to the SMR Jul-2026 Release 1. It allows local attackers to bypass the persistence configuration of the application, meaning they can potentially alter or evade the intended settings that control how the application maintains its state or data over time.

Impact Analysis

The impact of this vulnerability is that a local attacker with limited privileges could bypass the persistence configuration of KnoxGuardManager. This could lead to unauthorized changes in the application's behavior or state, potentially undermining security controls or stability of the system relying on this application.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21044. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart