Description
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | — | — |
Medium · 6.9
CVE-2026-21140
EUVD-2026-91157GHSA-crm9-6p8f-6cx9
Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications.
Published Oct 2, 2026 · Updated Oct 2, 2026 · Assigned by SamsungMobile