CVE Catalog
CVE-2026-21084
MediumCVSS 6.9Exploitation Probability (EPSS)
Low risk0.09%
1th percentile - higher than 1% of all known CVEs
Summary
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.
Risk Assessment
A local attacker can access sensitive data, potentially leading to privacy breaches or unauthorized actions.
Recommendation
Update SmartThings to version 1.8.47.24 or later.
Original NVD description (English source)
Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.