CVE Catalog
CVE-2026-21092
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.41%
35th percentile - higher than 35% of all known CVEs
Summary
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.
Risk Assessment
A remote attacker could create files in arbitrary locations with system privileges, potentially leading to privilege escalation or system integrity compromise.
Recommendation
Apply SMR Sep-2026 Release 1 to remediate the vulnerability.
Other vulnerabilities in ImsService
Original NVD description (English source)
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS