This vulnerability (CVE-2026-21008) affects Samsung Mobile Devices by exposing sensitive information via the S Share feature in versions prior to the SMR April 2026 Release 1. An adjacent attacker—someone on the same local network—can access sensitive data without needing privileges or user interaction. The CVSS 4.0 vector indicates low attack complexity and no required privileges, but limited scope and impact confined to confidentiality. No official remediation or patch has been documented in the vendor advisory or related sources.

The vulnerability allows an adjacent attacker to gain access to sensitive information on affected Samsung Mobile Devices through the S Share feature. The impact is limited to confidentiality exposure with no integrity or availability impact. There are no reported exploits in the wild, and the attack requires network adjacency, limiting the attack surface.

Patch status is not yet confirmed—check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit exposure to untrusted local networks and exercise caution when using S Share in potentially hostile environments.