Cloudanix VulnDB

CVE-2026-20972

Low · 3.3

CVSS

3.3

EPSS

0.1%

Published

Jan 9, 2026

CISA due date

—

The record

Improper Export of Android Application Components in UwbTest prior to SMR Jan-2026 Release 1 allows local attackers to enable UWB.

Affected packages

Ecosystem Package Introduced Fixed