CVE-2025-21065

Improper input validation in Retail Mode prior to version 5.59.11 allows self attackers to execute privileged commands on their own devices.

Affected

Samsung Mobile · Retail Mode

CVSS v3.1 SAMSUNG

6.6 MEDIUMCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.19% chance of exploitation in the next 30 days, 8th percentile

Published

2025-10-10

Proof-of-concept exploits (1)

• Pealeap/CVE-2025-210650★ · 2026-10-03

Security advisories

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=10

References

• CVE Record
• NVD entry

Related

• CVE-2026-21018
• CVE-2026-21045
• CVE-2026-21048