CVE-2026-125715
Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or u
CVSS
5.3
Medium
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026
Not enough EPSS history yet.
Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or use a close existing sessions if thier identifiers are known, The impact depends on the affected TA.
No related CVEs by CWE or product.