This vulnerability (CVE-2026-21003) arises from improper input validation in data related to network restrictions on Samsung Mobile Devices before the SMR Apr-2026 Release 1. The flaw enables physical attackers to bypass these restrictions by manipulating input data that the device fails to properly validate. The CVSS 4.0 vector indicates the attack requires physical access, has low complexity, no privileges or user interaction, and impacts confidentiality and integrity with high impact. No vendor advisory or patch information is currently available.

Successful exploitation allows a physical attacker to bypass network restrictions on affected Samsung Mobile Devices, potentially undermining security controls related to network access. The impact affects confidentiality and integrity at a high level but requires physical access to the device. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor Samsung Mobile advisories for updates and apply the SMR Apr-2026 Release 1 or later once available to address this issue.