CVE-2026-21113

4.8 mediumEPSS 0.1%

Medium (4.8) in samsung visual voicemail. EPSS 0.1% chance of exploitation in the next 30 days.

Improper export of android application components in Visual Voicemail prior to version 20.1.00.05 allows local attackers to initiate call without proper permission.

Severity

CVSS 4.0

4.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 2% of CVEs (scores of 2026-10-31)
CWE: CWE-926
Published: 2026-09-09
Modified: 2026-09-23
Record from: the NVD, synced 2026-10-19

Affected

samsung:visual_voicemail

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=09

Check your stack JSON