CVE-2026-21040

Improper access control in IAFDService prior to the SMR Jul-2026 Release 1 enables local privileged attackers to exploit privileged APIs, potentially leading to unauthorized access and manipulation of sensitive system functions. Organizations using affected versions of IAFDService should prioritize this vulnerability to mitigate risks associated with local privilege escalation. Immediate action is recommended for environments where local access is possible, particularly in sensitive or critical infrastructure settings.