CVE Watch8 oct 2026

CVE-2025-21062

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring a

CVSS

7.8

Alto

EPSS

0.1%

KEV

—

Exploit Today

0-100

Publicado: 10 oct 2025 · Última mod.: 8 oct 2026 · CWE-327

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-09-242026-10-21

Descripción técnica

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability.

Referencias oficiales

security.samsungmobile.comhttps://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-31615.9 MED

10.4%

——3IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.3d CVE-2026-69303.7 BAJ

6.2%

——2IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.3d CVE-2026-591166.8 MED

29.0%

——9Use of a broken or risky cryptographic algorithm in Windows Remote Desktop allows an unauthorized attacker to bypass a security feature over a network.9d CVE-2026-1028244.3 MED

3.1%

——1Russh is a Rust SSH client and server library. Prior to 0.63.0, the hybrid ML-KEM 768 and X25519 implementation in russh/src/kex/hybrid_mlkem.rs accepts an all-zero 32-byte peer X25519 public key in both server_dh and compute_shared_secret, forcing the X25519 contribution to the combined shared secret to zero. A malicious SSH peer can therefore make the combined secret depend only on ML-KEM, defeating the hybrid exchange's intended fallback protection if ML-KEM is later weakened. This issue is fixed in version 0.63.0.23d CVE-2026-181043.3 BAJ

0.0%

——0IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain sensitive information due to the use of the AES Electronic Codebook (ECB) mode for encryption.24d CVE-2026-823567.5 ALT

1.2%

——0Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices.28d