← CVE index
Vulnerability record/PUBLISHED/Published Nov 10, 2026 11:21:20 UTC

CVE-2026-125715

Samsung mTower lacks access control for TA sessions, allowing a Normal World application to open TA sessions and invoke their commands, or use a close existing sessions if thier identifiers are known, The impact depends on the affected TA.

Base score5.3/ 10
SeverityMediumCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes
Base severityMedium
Attack vectorLocalAV
Attack complexityLowAC
Privileges requiredLowPR
User interactionNoneUI
ScopeUnchangedS
Confidentiality impactLowC
Integrity impactLowI
Availability impactLowA
CVSS vector stringCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering Authoritysamsung.tv_appliance
Last updatedNov 15, 2026 07:17:13 UTC
PublishedNov 10, 2026 11:21:20 UTC
ReservedNov 10, 2026 11:05:13 UTC

Credits

  • Abdelrhman Allam