CVE-2026-21099

MediumCVSS 5.5

Published: 09/09/2026(UTC)Updated: 10/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.

Risk includes potential leakage of configuration data or other sensitive system information.

Install SMR Sep-2026 Release 1 or later, which includes the fix.

Original NVD description (English source)

Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS