CVE Catalog
CVE-2026-21022
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk0.09%
1th percentile - higher than 1% of all known CVEs
Summary
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
Risk Assessment
A local attacker can access data they should not be permitted to see. This risks disclosure of sensitive information.
Recommendation
Apply the SMR May-2026 Release 1 or later update. Until the fix is deployed, restrict local access to trusted users.
Other vulnerabilities in Routines
Original NVD description (English source)
Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS