VULNERABILITY INTELLIGENCE

CVE-2026-21031

CVSS score5.2 MEDIUM
EPSS probability0.09%
CISA KEVNot currently listed
Published2026-06-05
Last modified2026-10-26
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Description

Improper authorization in AppBlock prior to SMR Jun-2026 Release 1 allows local attacker to launch arbitrary activity. User interaction is required for triggering this vulnerability.

Weakness classification

  • CWE-863: Incorrect Authorization

Primary references