Low severity · published Sep 9, 2026
CVE-2026-21109
Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information
2.1
CVSS
0.2%
EPSS
No
On KEV
Description
Improper access control in Watch Plugin prior to Android Watch 17 allows local attackers to access sensitive information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WP
Watch Plugin · Samsung Mobile
All versions, or not specified · source: vendor