CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 10/08/2026 |
| CVE-2026-21005 | 中危6.5 | Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege. | 16/03/2026 |
| CVE-2026-21004 | 中危6.5 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service. | 16/03/2026 |
| CVE-2026-20999 | 高危7.5 | Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions. | 16/03/2026 |
| CVE-2026-20998 | 严重9.8 | Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication. | 16/03/2026 |
| CVE-2026-20997 | 严重9.8 | Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication. | 16/03/2026 |
| CVE-2026-20996 | 中危5.3 | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication. | 16/03/2026 |
| CVE-2026-20995 | 中危5.3 | Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration. | 16/03/2026 |
| CVE-2025-21078 | 中危6.5 | Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications. | 05/11/2025 |
| CVE-2025-21064 | 中危6.5 | Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data. | 10/10/2025 |
| CVE-2025-21062 | 高危7.8 | Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability. | 10/10/2025 |
| CVE-2025-21061 | 中危5.5 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability. | 10/10/2025 |
| CVE-2025-21060 | 中危5.5 | Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability. | 10/10/2025 |
| CVE-2025-20996 | 中危5.0 | Improper authorization in Smart Switch installed on non-Samsung Device prior to version 3.7.64.10 allows local attackers to read data with the privilege of Smart Switch. User interaction is required for triggering this vulnerability. | 04/06/2025 |