Findings

CVE-2026-21137

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

Published Oct 12, 2026 · updated Oct 14, 2026

Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 12, 2026 · NIST NVD

    Detected

    Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

Sources

  • CVE.orgCVE-2026-21137

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-21137

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDCVE-2026-21137

    Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.

    nvd.nist.gov

References