Cyber Posture

CVE-2026-20998

Critical

Published: 16 March 2026

Published
16 March 2026
Modified
31 March 2026
KEV Added
Patch
CVSS Score 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0028 51.2th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Description

Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.

Mitigating Controls (NIST 800-53 r5)AI

prevent

Requires timely identification, reporting, and correction of flaws like the improper authentication bypass in Smart Switch, directly enabling patching to version 3.7.69.15.

prevent

Enforces approved authorizations for access to system resources, preventing remote attackers from bypassing authentication mechanisms.

prevent

Mandates identification and authentication for non-organizational users such as remote attackers, directly countering the authentication bypass vulnerability.

Security SummaryAI

CVE-2026-20998 is an improper authentication vulnerability in Samsung Smart Switch prior to version 3.7.69.15. Published on 2026-03-16, the flaw enables remote attackers to bypass authentication mechanisms, as detailed in the NVD with CWE classified as noinfo.

The vulnerability carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating it is exploitable over the network with low attack complexity, no required privileges or user interaction, and no change in scope. Remote attackers can thus achieve high impacts on confidentiality, integrity, and availability by bypassing authentication.

Samsung's security advisory at https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=03 provides additional details on the issue. Mitigation requires updating Smart Switch to version 3.7.69.15 or later.

Details

CWE(s)

Affected Products

samsung
smart switch
≤ 3.7.69.15

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
Why these techniques?

The vulnerability is an improper authentication bypass in a network-accessible service (Samsung Smart Switch), directly enabling exploitation of a public-facing application for initial access with high impact.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

References