CVE-2026-20999

HIGH

Samsung Mobile Smart Switch < 3.7.69.15 - Authentication Bypass via Replay Attack

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-20999. PoCs published by lasdjk.

AI-analyzed exploit summary The repository contains a vague README with no technical details or exploit code, only a cryptic message in Chinese. It lacks any meaningful content and appears to be a placeholder or lure.

Description

Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.

Exploits (1)

nomisec SUSPICIOUS
by lasdjk · poc
https://github.com/lasdjk/CVE-2026-20999-my-thought

The repository contains a vague README with no technical details or exploit code, only a cryptic message in Chinese. It lacks any meaningful content and appears to be a placeholder or lure.

Classification
Suspicious 90%
Attack Type
Other
Complexity
Theoretical
Reliability
Theoretical
Target: unknown
No auth needed
Prerequisites: none provided
devstral-2 · analyzed Apr 09, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0016
EPSS Percentile 36.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-294
Status published
Products (2)
samsung/smart_switch < 3.7.69.15
Samsung Mobile/Smart Switch 3.7.69.15
Published Mar 16, 2026
Tracked Since Mar 16, 2026