Security Vulnerability Report
中文
CVE-2026-21006 CVSS 2.4 LOW

CVE-2026-21006

Published: 2026-04-13 06:16:05
Last Modified: 2026-04-13 18:38:15

Description

Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents.

CVSS Details

CVSS Score
2.4
Severity
LOW
CVSS Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Configurations (Affected Products)

cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:* - VULNERABLE
Samsung DeX < SMR Apr-2026 Release 1

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import subprocess def check_samsung_dex_vulnerability(): """ Conceptual PoC for checking if the device is running a vulnerable Samsung DeX version. This script simulates checking the Android build version/firmware. """ # In a real scenario, an attacker with physical access might use ADB (if enabled) # or check the device settings via UI interaction. # This represents the verification step. target_version_build = "APQXXXXXXXX" # Placeholder for vulnerable build fingerprint command = "getprop ro.build.fingerprint" try: # Simulating an ADB command execution process = subprocess.Popen(command.split(), stdout=subprocess.PIPE, stderr=subprocess.PIPE) output, error = process.communicate() if error: print(f"Error: {error.decode()}") return False current_fingerprint = output.decode().strip() print(f"Current Device Fingerprint: {current_fingerprint}") # Logic to determine if the device is vulnerable (Before SMR Apr-2026) # This is a hypothetical check logic. if "Apr-2026" not in current_fingerprint or "2025" in current_fingerprint: print("[!] Device is potentially vulnerable to CVE-2026-21006.") print("[*] Recommended Action: Apply SMR Apr-2026 Release 1 or later.") return True else: print("[+] Device appears to be patched.") return False except Exception as e: print(f"Exception occurred: {e}") return False if __name__ == "__main__": check_samsung_dex_vulnerability()

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-21006", "sourceIdentifier": "[email protected]", "published": "2026-04-13T06:16:05.003", "lastModified": "2026-04-13T18:38:14.630", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper access control in Samsung DeX prior to SMR Apr-2026 Release 1 allows physical attackers to access to hidden notification contents."}], "metrics": {"cvssMetricV40": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "4.0", "vectorString": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "PHYSICAL", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "exploitMaturity": "NOT_DEFINED", "confidentialityRequirement": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "availabilityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED"}}], "cvssMetricV31": [{"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 2.4, "baseSeverity": "LOW", "attackVector": "PHYSICAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 0.9, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:-:*:*:*:*:*:*", "matchCriteriaId": "95DE4E96-2F23-47E5-9DFC-44EC409F37E8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-apr-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "AB3F31FA-359F-4CB6-9078-CD2093D4C43A"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-aug-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "4207B265-009B-4FF8-85C5-01EBDB7701FF"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-dec-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "AAFE22F0-4B77-4034-8271-34A131B14D85"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-feb-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "7A5F4E59-BD59-41C8-82B2-A3C52E7125AA"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-feb-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "B1E0CF77-4D2C-4BA6-88ED-887DD1984763"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jan-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "F878069B-37C9-4636-8C31-526B610A0AFA"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jan-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "03A54EA0-3B86-4236-AA3C-840ACCD174A8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jul-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "B9BADD79-26FC-4498-AFEC-C79AF6B96924"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-jun-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "3A695EEE-B9DE-4448-BC51-AF5AC592AA59"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "FC6E2318-BD4E-4540-82C3-0D461C691119"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-mar-2026-r1:*:*:*:*:*:*", "matchCriteriaId": "1E516E0C-5A39-4657-93F7-16CCA42FA0E8"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-may-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "DDFC99BC-87AC-43AC-B815-36B7960C39D1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-nov-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "F9B1BCF7-069A-42BC-A654-5C894C92CF1A"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:android:15.0:smr-oct-2025-r1:*:*:*:*:*:*", "matchCriteriaId": "65F036A0-874D-4607-833E-167753748DEB"}, {"vulnerable": true, "criteria": "cpe:2.3:o:samsung:a ... (truncated)