CVE-2021-26687

9.8 criticalEPSS 0.6%

Critical (9.8) in google android. EPSS 0.6% chance of exploitation in the next 30 days.

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 (February 2021).

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
Published: 2021-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

https://lgsecurity.lge.com/
https://lgsecurity.lge.com/

Check your stack JSON