CVE-2026-21092

Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

  • Published Sep 9, 2026
  • CVSS 8.8 high
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-21092 at the National Vulnerability Database