CVE-2026-110392Suited to automated attack · CISA
Samsung QA-Board — Unauthenticated OS command injection via output redo/tuning
CVSS score
9.8
EPSS probability
%1.2
Risk score
0.1
Published
5 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and
Similar Vulnerabilities
6.5
CVE-2026-19587Uncontrolled resource consumption in Samsung Open Source Rlottie
Patch verifiedEPSS %0
6.5
CVE-2026-19518Vulnerability in Samsung Open Source Rlottie
Patch verifiedEPSS %0
6.5
CVE-2026-19517Resource allocation without limits in Samsung Open Source Rlottie
Patch verifiedEPSS %0
6.5
CVE-2026-18772Vulnerability in Samsung Open Source Rlottie
Patch verifiedEPSS %0
6.5
CVE-2026-19588Vulnerability in Samsung Open Source Rlottie
Patch verifiedEPSS %0
5.5
CVE-2026-82927Vulnerability in Samsung Open Source mTower
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-110392"