CVE Catalog
CVE-2026-21021
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
Risk Assessment
An attacker with physical access to the device can perform privileged operations, potentially compromising data confidentiality and integrity.
Recommendation
Update to the version containing SMR May-2026 Release 1 or later and restrict physical access to devices.
Other vulnerabilities in Routines
Original NVD description (English source)
Improper input validation in Routines prior to SMR May-2026 Release 1 allows physical attackers to launch privileged activity.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS