# Vulnerabilities published in 2026


- [CVE-2026-21031](https://insights.sbomify.com/CVE-2026-21031/): Missing authorization in Samsung Mobile Devices (medium 5.2)
- [CVE-2026-21030](https://insights.sbomify.com/CVE-2026-21030/): Missing authorization in Samsung Mobile Devices (medium 6.4)
- [CVE-2026-2103](https://insights.sbomify.com/CVE-2026-2103/): Use of Hard-Coded Cryptographic Key for Password Storage (high 7.1)
- [CVE-2026-21029](https://insights.sbomify.com/CVE-2026-21029/): Missing authorization in Samsung Mobile Devices (medium 6.8)
- [CVE-2026-21028](https://insights.sbomify.com/CVE-2026-21028/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2026-21027](https://insights.sbomify.com/CVE-2026-21027/): Missing authorization in Samsung Mobile Devices (medium 4.8)
- [CVE-2026-21026](https://insights.sbomify.com/CVE-2026-21026/): Information disclosure in Samsung Mobile Devices (medium 6.4)
- [CVE-2026-21025](https://insights.sbomify.com/CVE-2026-21025/): Privilege escalation in Samsung Mobile Devices (medium 6.9)
- [CVE-2026-21024](https://insights.sbomify.com/CVE-2026-21024/): Privilege escalation in Samsung System Support Service (medium 6.3)
- [CVE-2026-21023](https://insights.sbomify.com/CVE-2026-21023/): Security feature bypass in Samsung Mobile Devices (medium 6.9)
- [CVE-2026-21022](https://insights.sbomify.com/CVE-2026-21022/): Missing authorization in Samsung Mobile Devices (medium 6.9)
- [CVE-2026-21021](https://insights.sbomify.com/CVE-2026-21021/): Other in Samsung Mobile Devices (medium 5.1)
- [CVE-2026-21020](https://insights.sbomify.com/CVE-2026-21020/): Missing authorization in Samsung Mobile Devices (medium 5.1)
- [CVE-2026-21019](https://insights.sbomify.com/CVE-2026-21019/): Other in Samsung Mobile Devices (high 8.9)
- [CVE-2026-21018](https://insights.sbomify.com/CVE-2026-21018/): Memory corruption in Samsung Mobile Devices (medium 6.8)
- [CVE-2026-21017](https://insights.sbomify.com/CVE-2026-21017/): Missing authorization in Samsung Mobile Devices (medium 4.6)
- [CVE-2026-21016](https://insights.sbomify.com/CVE-2026-21016/): Privilege escalation in Samsung Mobile Devices (medium 5.1)
- [CVE-2026-21015](https://insights.sbomify.com/CVE-2026-21015/): Misconfiguration in Samsung Mobile Devices (medium 6.8)
- [CVE-2026-21014](https://insights.sbomify.com/CVE-2026-21014/): Missing authorization in Samsung Camera (medium 5.1)
- [CVE-2026-21013](https://insights.sbomify.com/CVE-2026-21013/): Misconfiguration in Galaxy Wearable (medium 6.9)
- [CVE-2026-21012](https://insights.sbomify.com/CVE-2026-21012/): Privilege escalation in Samsung Mobile Devices (medium 6.8)
- [CVE-2026-21011](https://insights.sbomify.com/CVE-2026-21011/): Security feature bypass in Samsung Mobile Devices (medium 5.4)
- [CVE-2026-21010](https://insights.sbomify.com/CVE-2026-21010/): Privilege escalation in Samsung Mobile Devices (medium 6.6)
- [CVE-2026-2101](https://insights.sbomify.com/CVE-2026-2101/): Cross-site scripting in ENOVIAvpm Web Access (high 8.7)
- [CVE-2026-21009](https://insights.sbomify.com/CVE-2026-21009/): Security feature bypass in Samsung Mobile Devices (medium 4.1)
- [CVE-2026-21008](https://insights.sbomify.com/CVE-2026-21008/): Information disclosure in Samsung Mobile Devices (medium 5.1)
- [CVE-2026-21007](https://insights.sbomify.com/CVE-2026-21007/): Security feature bypass in Samsung Mobile Devices (medium 4.4)
- [CVE-2026-21006](https://insights.sbomify.com/CVE-2026-21006/): Missing authorization in Samsung Mobile Devices (medium 4.7)
- [CVE-2026-21005](https://insights.sbomify.com/CVE-2026-21005/): Path traversal in Smart Switch (high 7.1)
- [CVE-2026-21004](https://insights.sbomify.com/CVE-2026-21004/): Auth bypass in Smart Switch (medium 6.9)
- [CVE-2026-21003](https://insights.sbomify.com/CVE-2026-21003/): Security feature bypass in Samsung Mobile Devices (medium 5.2)
- [CVE-2026-21002](https://insights.sbomify.com/CVE-2026-21002/): Security feature bypass in Galaxy Store (medium 5.9)
- [CVE-2026-21001](https://insights.sbomify.com/CVE-2026-21001/): Path traversal in Galaxy Store (medium 5.9)
- [CVE-2026-21000](https://insights.sbomify.com/CVE-2026-21000/): Path traversal in Galaxy Store (high 7.0)
- [CVE-2026-2100](https://insights.sbomify.com/CVE-2026-2100/): P11-kit: null dereference via c_derivekey with specific null parameters (medium 5.3)
- [CVE-2026-20999](https://insights.sbomify.com/CVE-2026-20999/): Auth bypass in Smart Switch (high 7.1)
- [CVE-2026-20998](https://insights.sbomify.com/CVE-2026-20998/): Auth bypass in Smart Switch (high 7.1)
- [CVE-2026-20997](https://insights.sbomify.com/CVE-2026-20997/): Security feature bypass in Smart Switch (medium 5.3)
- [CVE-2026-20996](https://insights.sbomify.com/CVE-2026-20996/): Weak cryptography in Smart Switch (high 7.1)
- [CVE-2026-20995](https://insights.sbomify.com/CVE-2026-20995/): Missing authorization in Smart Switch (medium 5.3)
- [CVE-2026-20994](https://insights.sbomify.com/CVE-2026-20994/): Open redirect in Samsung Account (medium 6.9)
- [CVE-2026-20993](https://insights.sbomify.com/CVE-2026-20993/): Missing authorization in Samsung Assistant (medium 4.8)
- [CVE-2026-20992](https://insights.sbomify.com/CVE-2026-20992/): Missing authorization in Samsung Mobile Devices (medium 4.8)
- [CVE-2026-20991](https://insights.sbomify.com/CVE-2026-20991/): Privilege escalation in Samsung Mobile Devices (medium 6.7)
- [CVE-2026-20990](https://insights.sbomify.com/CVE-2026-20990/): Missing authorization in Samsung Mobile Devices (high 8.4)
- [CVE-2026-2099](https://insights.sbomify.com/CVE-2026-2099/): Flowring｜AgentFlow - Stored Cross-Site Scripting (medium 5.1)
- [CVE-2026-20989](https://insights.sbomify.com/CVE-2026-20989/): Security feature bypass in Samsung Mobile Devices (medium 5.1)
- [CVE-2026-20988](https://insights.sbomify.com/CVE-2026-20988/): Privilege escalation in Samsung Mobile Devices (medium 6.8)
- [CVE-2026-20987](https://insights.sbomify.com/CVE-2026-20987/): Command injection in GalaxyDiagnostics (high 8.7)
- [CVE-2026-20986](https://insights.sbomify.com/CVE-2026-20986/): Path traversal in Chinese Samsung Members (medium 5.1)
- [CVE-2026-20985](https://insights.sbomify.com/CVE-2026-20985/): Other in Samsung Members (high 7.0)
- [CVE-2026-20984](https://insights.sbomify.com/CVE-2026-20984/): Missing authorization in Galaxy Wearable (medium 5.1)
- [CVE-2026-20983](https://insights.sbomify.com/CVE-2026-20983/): Missing authorization in Samsung Mobile Devices (high 8.4)
- [CVE-2026-20982](https://insights.sbomify.com/CVE-2026-20982/): Path traversal in Samsung Mobile Devices (medium 6.8)
- [CVE-2026-20981](https://insights.sbomify.com/CVE-2026-20981/): Command injection in Samsung Mobile Devices (medium 5.4)
- [CVE-2026-20980](https://insights.sbomify.com/CVE-2026-20980/): Command injection in Samsung Mobile Devices (high 7.0)
- [CVE-2026-2098](https://insights.sbomify.com/CVE-2026-2098/): Flowring｜AgentFlow - Reflected Cross-site Scripting (medium 5.1)
- [CVE-2026-20979](https://insights.sbomify.com/CVE-2026-20979/): Privilege escalation in Samsung Mobile Devices (high 8.4)
- [CVE-2026-20978](https://insights.sbomify.com/CVE-2026-20978/): Missing authorization in Samsung Mobile Devices (medium 5.8)
- [CVE-2026-20977](https://insights.sbomify.com/CVE-2026-20977/): Missing authorization in Samsung Mobile Devices (medium 6.9)
- [CVE-2026-20976](https://insights.sbomify.com/CVE-2026-20976/): Other in Galaxy Store (medium 5.1)
- [CVE-2026-20975](https://insights.sbomify.com/CVE-2026-20975/): Missing authorization in Samsung Cloud (low 2.1)
- [CVE-2026-20974](https://insights.sbomify.com/CVE-2026-20974/): Security feature bypass in Samsung Mobile Devices (medium 5.2)
- [CVE-2026-20973](https://insights.sbomify.com/CVE-2026-20973/): Memory corruption in Samsung Mobile Devices (medium 5.3)
- [CVE-2026-20972](https://insights.sbomify.com/CVE-2026-20972/): Missing authorization in Samsung Mobile Devices (medium 4.8)
- [CVE-2026-20971](https://insights.sbomify.com/CVE-2026-20971/): Use after free in Samsung Mobile Devices (high 7.3)
- [CVE-2026-20970](https://insights.sbomify.com/CVE-2026-20970/): Missing authorization in Samsung Mobile Devices (medium 6.8)
- [CVE-2026-2097](https://insights.sbomify.com/CVE-2026-2097/): Flowring｜Agentflow - Arbitrary File Upload (high 8.7)
- [CVE-2026-20969](https://insights.sbomify.com/CVE-2026-20969/): Privilege escalation in Samsung Mobile Devices (low 2.3)
- [CVE-2026-20968](https://insights.sbomify.com/CVE-2026-20968/): Use after free in Samsung Mobile Devices (medium 6.7)
- [CVE-2026-20967](https://insights.sbomify.com/CVE-2026-20967/): System Center Operations Manager (SCOM) Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2026-20965](https://insights.sbomify.com/CVE-2026-20965/): Windows Admin Center Elevation of Privilege Vulnerability (high 7.5)
- [CVE-2026-20963](https://insights.sbomify.com/CVE-2026-20963/): Microsoft SharePoint Deserialization of Untrusted Data (critical 9.8, exploited in the wild)
- [CVE-2026-20962](https://insights.sbomify.com/CVE-2026-20962/): Dynamic Root of Trust for Measurement (DRTM) Information Disclosure Vulnerability (medium 4.4)
- [CVE-2026-20960](https://insights.sbomify.com/CVE-2026-20960/): PowerApps Desktop Client Remote Code Execution Vulnerability (high 8.0)
- [CVE-2026-2096](https://insights.sbomify.com/CVE-2026-2096/): Flowring｜Agentflow - Missing Authenticaton (critical 9.3)
- [CVE-2026-20959](https://insights.sbomify.com/CVE-2026-20959/): Microsoft SharePoint Server Spoofing Vulnerability (medium 4.6)
- [CVE-2026-20958](https://insights.sbomify.com/CVE-2026-20958/): Microsoft SharePoint Information Disclosure Vulnerability (medium 5.4)
- [CVE-2026-20957](https://insights.sbomify.com/CVE-2026-20957/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20956](https://insights.sbomify.com/CVE-2026-20956/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20955](https://insights.sbomify.com/CVE-2026-20955/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20953](https://insights.sbomify.com/CVE-2026-20953/): Microsoft Office Remote Code Execution Vulnerability (high 8.4)
- [CVE-2026-20952](https://insights.sbomify.com/CVE-2026-20952/): Microsoft Office Remote Code Execution Vulnerability (high 8.4)
- [CVE-2026-20951](https://insights.sbomify.com/CVE-2026-20951/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20950](https://insights.sbomify.com/CVE-2026-20950/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-2095](https://insights.sbomify.com/CVE-2026-2095/): Flowring｜Agentflow - Authentication Bypass (critical 9.3)
- [CVE-2026-20949](https://insights.sbomify.com/CVE-2026-20949/): Microsoft Excel Security Feature Bypass Vulnerability (high 7.8)
- [CVE-2026-20948](https://insights.sbomify.com/CVE-2026-20948/): Microsoft Word Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20947](https://insights.sbomify.com/CVE-2026-20947/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2026-20946](https://insights.sbomify.com/CVE-2026-20946/): Microsoft Excel Remote Code Execution Vulnerability (high 7.8)
- [CVE-2026-20945](https://insights.sbomify.com/CVE-2026-20945/): Microsoft SharePoint Server Spoofing Vulnerability (medium 4.6)
- [CVE-2026-20944](https://insights.sbomify.com/CVE-2026-20944/): Microsoft Word Remote Code Execution Vulnerability (high 8.4)
- [CVE-2026-20943](https://insights.sbomify.com/CVE-2026-20943/): Microsoft Office Click-To-Run Remote Code Execution Vulnerability (high 7.0)
- [CVE-2026-20942](https://insights.sbomify.com/CVE-2026-20942/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2026-20941](https://insights.sbomify.com/CVE-2026-20941/): Host Process for Windows Tasks Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20940](https://insights.sbomify.com/CVE-2026-20940/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-2094](https://insights.sbomify.com/CVE-2026-2094/): Flowring｜Docpedia - SQL Injection (high 8.7)
- [CVE-2026-20939](https://insights.sbomify.com/CVE-2026-20939/): Windows File Explorer Information Disclosure Vulnerability (medium 5.5)
- [CVE-2026-20938](https://insights.sbomify.com/CVE-2026-20938/): Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2026-20937](https://insights.sbomify.com/CVE-2026-20937/): Windows File Explorer Information Disclosure Vulnerability (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2026/page/810/