{"id":"CVE-2026-125715","published":"2026-11-10T12:17:18.760","lastModified":"2026-11-10T12:17:18.760","description":"Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or use a close existing sessions if thier identifiers are known, The impact depends on the affected TA.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/Samsung/mTower/commit/97070d65ac63713b188b6e2d6bb7076d95100429","tags":[]}],"exploitRefs":[{"url":"https://github.com/Samsung/mTower/commit/97070d65ac63713b188b6e2d6bb7076d95100429","tags":[]}],"hasPoc":true,"ai":null}