PULSEUnderground Intel

EN VIVO21señales / 24h

FEED

ransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technologyransomrhysida reclama a Cipsa Industrias Sa De Cv · MX · Manufacturingransomqilin reclama a Richland Resources Corporation · US · Energy & Utilitiesransomsilentransomgroup reclama a A... F...ransomqilin reclama a Sistemas Visuales 360 · MX · Technologyransomqilin reclama a Societe Ivoirienne De Telediffusion · CI · Technologyransomqilin reclama a Palletline · GB · Transportationransomaurora reclama a Rapid Manufacturing · Manufacturingransomakira reclama a FrenchCreek Production · US · Energy & Utilitiesransomqilin reclama a Light Rail Manila · PH · Transportationransomakira reclama a Hudson & Hudson Sign Products · US · Manufacturingransomakira reclama a Service One Transportation · Transportationransomqilin reclama a Farmacia I · MX · Healthcareransomqilin reclama a Grupo Ciosa, SAPI de CV · MX · Otherransomqilin reclama a iFink · RO · Technology

← Todos los CVEs

CVE Watch26 oct 2026

CVE-2026-21011

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend U

CVSS

6.8

Medio

EPSS

0.1%

p4

KEV

—

Exploit Today

1

0-100

Publicado: 13 abr 2026 · Última mod.: 26 oct 2026 · CWE-732

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-022026-10-29

Descripción técnica

Incorrect privilege assignment in Bluetooth in Maintenance mode prior to SMR Apr-2026 Release 1 allows physical attackers to bypass Extend Unlock.

Referencias oficiales

security.samsungmobile.comhttps://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=04

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1114995.5 MED

———Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.8h CVE-2026-118574—

——0Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0.5h CVE-2026-1070609.1 CRÍ

——0Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.6h CVE-2026-1070557.5 ALT

——0Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.5h CVE-2026-1070477.5 ALT

——0Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.5h CVE-2026-1070447.5 ALT

——0Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.5h