This vulnerability (CVE-2026-21063) affects Samsung Mobile Devices' AppLock feature before the SMR Aug-2026 Release 1. It involves improper export of Android application components (CWE-926), which can be exploited by physical attackers to bypass the app lock security mechanism. The CVSS 4.0 vector indicates the attack requires physical access (AV:P), has low complexity (AC:L), and does not require privileges or user interaction, but results in high confidentiality and integrity impact. No vendor advisory or patch information is currently provided, and no known exploits are reported in the wild.

The vulnerability allows an attacker with physical access to bypass the AppLock function on affected Samsung Mobile Devices, potentially exposing locked applications and sensitive data. The impact affects confidentiality and integrity at a high level, but the attack requires physical presence and no privileges or user interaction are needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should restrict physical access to their devices and consider additional device-level security controls.