PT-2026-35867 · Unknown · Package Manager Service

Vignesh.K.G · Published 2026-04-29 · Updated 2026-05-01 · CVE-2026-21023

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions PackageManagerService versions prior to SMR Mar-2026 Release 1

Description Insufficient verification of data authenticity in the PackageManagerService allows local attackers to modify the installation restriction of specific applications.

Recommendations Update to SMR Mar-2026 Release 1.

Fix

Related Identifiers

CVE-2026-21023

Affected Products

Package Manager Service

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-21023 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb?year=2026&month=03 · Vendor Advisory
• https://twitter.com/CVEarity/status/2049541768644104426 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2049493442917552590 · Twitter Post
• https://t.me/cveNotify/161788 · Telegram Post
• https://twitter.com/CVEnew/status/2049594401412743659 · Twitter Post