CVE-2026-21010
MediumCVSS 6.6Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
Risk Assessment
A local attacker may reach privileged functionality, potentially compromising system confidentiality or integrity.
Recommendation
Install SMR Apr-2026 Release 1 or later to remediate the vulnerability.
Other vulnerabilities in Retail Mode
See all- CVE-2025-21065Medium
Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices.
- CVE-2025-21056Medium
In Retail Mode prior to version 5.59.4, improper input validation allows attackers to execute privileged commands on their own devices.
Original NVD description (English source)
Improper input validation in Retail Mode prior to SMR Apr-2026 Release 1 allows local attackers to trigger privileged functions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS