CVE-2026-21064
Received Received - Intake

Improper Access Control in Weaver SMR Aug-2026

Vulnerability report for CVE-2026-21064, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: Samsung Mobile

Description

Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
samsung weaver to 2026-08-01 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper access control issue in Weaver software before the SMR Aug-2026 Release 1. It allows local attackers to cause the device to become inoperable.

Detection Guidance

This vulnerability involves improper access control in Samsung Weaver prior to SMR Aug-2026 Release 1. Detection requires checking Weaver version and system logs for unauthorized access attempts or device inoperability issues.

Impact Analysis

A local attacker could exploit this to make your device unusable. This could disrupt normal operations if you rely on Weaver for critical functions.

Compliance Impact

The vulnerability involves improper access control allowing local attackers to cause device inoperability in Weaver software. This could potentially lead to unauthorized access or disruption of systems handling sensitive data, which may impact compliance with standards like GDPR or HIPAA if such systems are affected.

Mitigation Strategies

Update Weaver to the SMR Aug-2026 Release 1 or later to address the improper access control issue. Restrict local access to Weaver and monitor for unusual device behavior.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21064. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart