Threats Tagged 'cve-2026-20977'

CVE-2026-20977 is a medium severity vulnerability affecting Samsung Mobile Devices involving improper access control in the Emergency Sharing feature prior to the SMR February 2026 Release 1. This flaw allows local attackers to interrupt the functioning of Emergency Sharing without requiring authentication or user interaction. The vulnerability does not impact confidentiality, integrity, or availability beyond the Emergency Sharing service but can disrupt critical emergency communication capabilities. Exploitation requires local access to the device, limiting the attack surface to scenarios where an attacker has physical or local access. No known exploits are currently reported in the wild. European organizations using Samsung Mobile Devices, especially in sectors relying on emergency communication features, should prioritize updating devices once patches are available. Countries with high Samsung mobile market penetration and critical emergency response infrastructure are most likely to be affected. Mitigation involves applying the forthcoming SMR February 2026 Release 1 update and restricting local device access to trusted users. Overall, the vulnerability poses a medium risk due to its limited scope and local attack vector but could impact emergency response reliability if exploited.

MediumVulnerabilityGermanyFranceItaly+5#cve#cve-2026-20977#cwe-284