CVE-2026-20978
Medium · 6.1CVSS
6.1
EPSS
0.1%
Published
Feb 4, 2026
CISA due date
—
The record
Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|