CVE-2026-21079
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
Risk Assessment
An attacker in close proximity can intercept transmitted data, potentially leading to disclosure of sensitive information such as credentials or personal data.
Recommendation
It is recommended to update Smart Switch to version 3.7.72.6 or later, which includes the encryption fix.
Other vulnerabilities in Smart Switch
See all- CVE-2026-21083Medium
Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
- CVE-2026-21080Medium
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
- CVE-2026-21078Medium
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
- CVE-2025-21064High
Improper authentication in Smart Switch prior to version 3.7.66.6 allows adjacent attackers to access transferring data.
- CVE-2025-21062High
Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required.
- CVE-2025-21061High
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required.
- CVE-2025-21060Medium
Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability.
Original NVD description (English source)
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS