This vulnerability (CVE-2026-21008) concerns an information exposure issue (CWE-200) in Samsung Mobile Devices' S Share feature before the SMR April 2026 Release 1. An adjacent attacker can access sensitive information due to insufficient protection mechanisms. The CVSS 4.0 vector indicates the attack requires adjacent network access, low attack complexity, no privileges, and no user interaction, with low impact on confidentiality. No official patch or remediation guidance has been provided by the vendor yet.

The vulnerability allows an attacker on an adjacent network to access sensitive information from affected Samsung Mobile Devices. The impact is limited to information disclosure with low confidentiality impact. There is no indication of privilege escalation, integrity, or availability impact. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should be cautious when using S Share in potentially untrusted adjacent network environments. No vendor advisory or official remediation level is currently available.