VDB

CVE-2026-20978

CVE-2026-20978 PUBLISHED CVSS 5.800000190734863 MEDIUM

Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.

EPSS 0.01% · 0.6th percentile

Risk Scores

CVSS 4.0
5.800000190734863
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS Score
0.01%
0.6th percentile

Affected Products

VendorProductVersions
Samsung MobileSamsung Mobile DevicesSMR Feb-2026 Release in Android 13, 14, 15, SMR Feb-2026 Release in Android 13, 14, 15
samsungandroid13.0, 13.0, 13.0

Timeline

  • Feb 4, 2026 EPSS Score
  • Feb 4, 2026 CVE Published
  • Feb 5, 2026 CVE Updated
  • Feb 6, 2026 EPSS Score
  • Feb 8, 2026 EPSS Score
  • Feb 11, 2026 EPSS Score
  • Feb 13, 2026 EPSS Score
  • Feb 15, 2026 EPSS Score
  • Feb 17, 2026 EPSS Score
  • Feb 20, 2026 EPSS Score
  • Feb 22, 2026 EPSS Score
  • Feb 24, 2026 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›