CVE-2026-21084 Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information

Description

Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
SmartThings 1.8	premières → < 1.8.47.24	1.8.47.24

Autres CVE de SmartThings

Les 15 CVE de SmartThings →

CVE-2024-49416 Use of implicit intent for sensitive communication in SmartThings prior to version 1.8.21 allows local attackers to… 4.0 Moyenne CVE-2024-34596 Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for… 5.9 Moyenne CVE-2024-20852 Improper verification of intent by broadcast receiver vulnerability in SmartThings prior to version 1.8.13.22 allows… 5.9 Moyenne CVE-2022-39868 Improper access control vulnerability in GedSamsungAccount.kt SmartThings prior to version 1.7.89.0 allows attackers… 4.0 Moyenne