{"id":"CVE-2026-21139","title":"Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.","summary":"Improper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.","severity":"high","cvss":7.3,"cvssVector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H","cwe":["CWE-284"],"vendor":"Samsung Mobile","product":"Samsung Continuity Service for windows","affected":["samsung_continuity_service_for_windows (all versions)"],"published":"2026-10-12","updated":"2026-10-15","sourceUpdated":"2026-10-15T19:17:38.153","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-21139","references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=10","label":"mobile.security@samsung.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-10-15T17:51:30.554906Z"},"cvssSource":"cna","epss":0.0012,"epssPercentile":0.01849,"ingestedAt":"2026-10-12T14:50:34.089Z","slug":"CVE-2026-21139","body":"## Overview\n\nImproper access control in Samsung Continuity Service for windows prior to version 4.6.1217.0 allows adjacent attackers to manipulate the connected mobile device.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":220739,"id":"CVE-2026-21139","ts":1792026729378,"field":"cvss","old":null,"new":"7.3"},{"seq":220738,"id":"CVE-2026-21139","ts":1792026729378,"field":"severity","old":"none","new":"high"}]}