CVE-2026-21040

None

CVSS

—

EPSS

—

Published

Jul 10, 2026

CISA due date

—

The record

Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows local privileged attackers to use the privileged APIs.

Ecosystem	Package	Introduced	Fixed