CVE-2021-26638

CRITICAL 9.8CVE-2021-26638 · Published 23/06/2022 · updated 17/06/2026

In short

CVE-2021-26638 is a CRITICAL (CVSS 9.8) vulnerability affecting s&d smarthome (xisnd).
Chance of exploitation in the next 30 days (EPSS): 3.8%, higher than 90.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
s&d smarthome xisnd	`≤ 3.2.48`	No fix yet

Description

Improper Authentication vulnerability in S&D smarthome(smartcare) application can cause authentication bypass and information exposure. Remote attackers can use this vulerability to take control of the home environment including indoor control.

References

krcert.or.kr/krcert/secNoticeView.do · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free