CVE Tools
Track your stack

Smart Switch

21 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Smart Switch, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Smart Switch CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Smart Switch CVEs per month
MonthCVEs
2024-121
2025-010
2025-020
2025-030
2025-040
2025-050
2025-061
2025-070
2025-080
2025-090
2025-104
2025-111
2025-120
2026-010
2026-020
2026-037
2026-040
2026-050
2026-060
2026-070
2026-084
2026-090
2026-103
2026-110

Severity

How the 21 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical211%
  • High633%
  • Medium1056%

Latest CVEs

The 15 most recently published vulnerabilities affecting Smart Switch.

  1. CVE-2026-21138Insufficient verification of data authenticity in Smart Switch prior to version 3.7.73 allows physical attackers to install arbitrary applications.—
  2. CVE-2026-21137Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.—
  3. CVE-2026-21136Improper authorization in Smart Switch prior to version 3.7.73 allows physical attackers to invoke application restore process.—
  4. CVE-2026-21083Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.6.5
  5. CVE-2026-21080Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.6.5
  6. CVE-2026-21079Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.6.5
  7. CVE-2026-21078Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.6.5
  8. CVE-2026-21005Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.6.5
  9. CVE-2026-21004Improper authentication in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to trigger a denial of service.6.5
  10. CVE-2026-20999Authentication bypass by replay in Smart Switch prior to version 3.7.69.15 allows remote attackers to trigger privileged functions.7.5
  11. CVE-2026-20998Improper authentication in Smart Switch prior to version 3.7.69.15 allows remote attackers to bypass authentication.9.8
  12. CVE-2026-20997Improper verification of cryptographic signature in Smart Switch prior to version 3.7.69.15 allows remote attackers to potentially bypass authentication.9.8
  13. CVE-2026-20996Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.69.15 allows remote attackers to configure a downgraded scheme for authentication.5.3
  14. CVE-2026-20995Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.5.3
  15. CVE-2025-21078Use of insufficiently random value of secretKey in Smart Switch prior to version 3.7.68.6 allows adjacent attackers to access backup data from applications.8.8

Product grouping is registry-driven, with AI assist and human review. How it works