Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | affected |
|
No data.
No data.
| Vendor | Product | Confidence | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | 100% |
|
Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .
No solution or workaround provided in the CVE record.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Sat, 03 Oct 2026 06:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 02 Oct 2026 02:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Local Access Control Failure Enabling Arbitrary Application Installation via ManagedProvisioning | |
| First Time appeared |
Samsung Mobile
Samsung Mobile samsung Mobile Devices |
|
| Weaknesses | CWE-284 | |
| Vendors & Products |
Samsung Mobile
Samsung Mobile samsung Mobile Devices |
Fri, 02 Oct 2026 01:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications. | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: SamsungMobile
Published:
Updated: 2026-10-02T18:20:42.776Z
Reserved: 2025-12-11T01:33:35.834Z
Link: CVE-2026-21140
Vulnrichment
Updated: 2026-10-02T18:20:38.875Z
NVD
Status : Awaiting Analysis
Published: 2026-10-02T02:17:02.157
Modified: 2026-10-02T19:16:41.370
Link: CVE-2026-21140
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-10-02T02:30:18Z
-
CWE-284
Improper Access Control