VulnSocial

CVE-2026-20978Patch(samsung / android)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch samsung android systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application.

samsung CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • android

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-02-04); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
samsung
Products
android

4 versions affected across 1 product

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-02-04: 2Mentions · 2026-02-11: 1Patch / Workaround · 2026-02-04: 1Patch / Workaround · 2026-02-11: 1Technical Details · 2026-02-04: 2Technical Details · 2026-02-11: 102-0402-11
Signal classification2 categories
Patch
266.7%
Disclosure
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-042
Disclosure1Patch1
2026-02-111
Patch1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-20978 Improper authorization in KnoxGuardManager prior to SMR Feb-2026 Release 1 allows local attackers to bypass the persistence configuration of the application. https://www.cve.org/CVERecord?id=CVE-2026-20978

    Post summary

    The post announces CVE-2026-20978, noting improper authorization that lets local attackers bypass persistence configuration, without mentioning PoC, exploit, patch, or active exploitation.

    00010202
    56.5K followersView on X
  • Un informático a martillazos@martillazosIT
    Patch

    @IMclure @BrodaxOficial Knox acaba de parchear CVE-2026-20978 (bypass KnoxGuardManager) y CVE-2026-20979 en Feb'26. "Usuario normal no nota" tampoco nota que GooglePay requiere conexión a servidores Google para cada transacción NFC. ApplePay tokeniza en Secure Enclave sin roundtrip. Arquitectura manda.

    Post summary

    Knox released patches for CVE-2026-20978 and CVE-2026-20979 in February 2026, addressing a bypass of KnoxGuardManager, with no indication of active exploitation or a PoC.

    0000044
    53 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Patch

    CVE-2026-20978 Local Authorization Bypass in KnoxGuardManager Prior to SMR Feb-2026 Release 1 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-20978

    Post summary

    The text announces a local authorization bypass vulnerability (CVE‑2026‑20978) in KnoxGuardManager, noting that it will be addressed in the upcoming SMR Feb‑2026 Release 1 patch.

    0000048
    4.0K followersView on X
CPE platform detail125 entries

125 of 125 entries

PartVendorProductVersionTarget SWTarget HW
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid13.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid14.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid15.0--
OSsamsungandroid16.0--
OSsamsungandroid16.0--
OSsamsungandroid16.0--
OSsamsungandroid16.0--
OSsamsungandroid16.0--
OSsamsungandroid16.0--
OSsamsungandroid16.0--

Explore more

Back to dashboardsamsung CVEsandroid vulnerabilities