{"id":"CVE-2026-21121","published":"2026-10-12T05:17:00.640","lastModified":"2026-10-16T17:17:33.523","description":"Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-280"],"vendors":[],"products":[],"references":[{"url":"https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=10","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}