CVE-2026-21157

CVSS 8.3 (high) ยท published 2026-10-29

Improper input validation in Bixby prior to version 4.0.85.6 allows privileged local attackers to launch arbitrary activity.

Weakness: CWE-20

Source: NVD CVE-2026-21157

References

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.