CVE Catalog
CVE-2026-21079
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.07%
0th percentile - higher than 0% of all known CVEs
Summary
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
Risk Assessment
An attacker in close proximity can intercept transmitted data, potentially leading to disclosure of sensitive information such as credentials or personal data.
Recommendation
It is recommended to update Smart Switch to version 3.7.72.6 or later, which includes the encryption fix.
Original NVD description (English source)
Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.