CVE-2026-21050
NoneCVSS
—
EPSS
—
Published
Jul 10, 2026
CISA due date
—
The record
Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 allows local attackers to access sensitive information.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|