CVE-2026-21015
Incorrect default permissions in FactoryCamera prior to SMR May-2026 Release 1 allows local attacker to access unique identifier.
- Affected products
- Factorycamera
- Samsung Android
- = 14.0, 15.0, 16.0
- Fix
- Available
- CVSS 4.0
- 6.8 MEDIUM
- CVSS 3.1
- 5.5 MEDIUM
- EPSS
- 0.1% (1th percentile)
- Weakness
- CWE-276
- NVD status
- Analyzed
- Published
- 2026-05-13
CVE-2026-21015 at NVD
2 known exploits for CVE-2026-21015
Proof-of-concept code and exploit modules indexed by Sploitus