CVE-2026-21039

Improper access control in the Settings of affected products prior to the SMR Jul-2026 Release 1 enables local attackers to manipulate Theft protection settings, potentially compromising device security. Organizations utilizing these products should prioritize addressing this vulnerability to prevent unauthorized configuration changes that could lead to theft or data loss.