Vulnerabilities
All
My stack
Known exploited
Public exploit
Critical (9+)
Likely exploited (EPSS ≥ 50%)
Changed, 24 h
New, 24 h
Sort:
risk
modified
published
CVSS
EPSS
| CVE | CVSS | EPSS | Vendor, product | Description | Modified |
|---|---|---|---|---|---|
| CVE-2025-21062 | 7.8 high | 0.00% | samsung, smart_switch | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability. | 8 Oct |
| CVE-2026-21079 | 7.0 high | 0.00% | samsung, smart_switch | Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data. | Fri 23 Oct |
| CVE-2026-21080 | 6.9 medium | 0.00% | samsung, smart_switch | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data. | Fri 23 Oct |
| CVE-2026-21138 | 6.9 medium | 0.00% | no CPE yet | Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications. | 15 Oct |
| CVE-2026-21083 | 6.8 medium | 0.00% | samsung, smart_switch | Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data. | Fri 23 Oct |
| CVE-2026-21136 | 6.8 medium | 0.00% | no CPE yet | Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process. | 15 Oct |
| CVE-2025-21078 | 6.5 medium | 0.00% | samsung, smart_switch | Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications. | 18 Oct |
| CVE-2025-21064 | 6.5 medium | 0.00% | samsung, smart_switch | Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data. | 8 Oct |
| CVE-2025-21060 | 5.5 medium | 0.00% | samsung, smart_switch | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability. | 8 Oct |
| CVE-2025-21061 | 5.5 medium | 0.00% | samsung, smart_switch | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability. | 8 Oct |
| CVE-2026-21137 | 5.1 medium | 0.00% | no CPE yet | Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege. | 14 Oct |
| CVE-2026-21078 | 4.7 medium | 0.00% | samsung, smart_switch | Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity. | Fri 23 Oct |
| CVE-2026-30613 | 4.6 medium | 0.00% | no CPE yet | An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on the UART debug interface. An attacker with physical access can connect to the UART interface and obtain sensitive information from the serial console without authentication. | Sat 24 Oct |
13 of 13
Download these 13 as CSV · subscribe to this list.
EPSS scores: 2026-10-28. NVD cursor: 2026-10-29 00:22. The News page shows only notable CVEs (KEV, your stack, new criticals, EPSS over 50%, or active exploitation per SSVC); this table has all of them.