CVE-2026-21019

None

CVSS

—

EPSS

0.2%

Published

May 13, 2026

CISA due date

—

The record

Improper input validation in FacAtFunction in Galaxy Watch prior to SMR May-2026 Release 1 allows local attacker to execute arbitrary code with system privilege.

Affected packages

Ecosystem	Package	Introduced	Fixed