CVE-2026-21073

Improper input validation in Galaxy Themes prior to the SMR Aug-2026 Release 1 allows physical attackers to execute arbitrary activities on affected devices. This vulnerability poses a medium risk, particularly for organizations using Galaxy devices in environments where physical access is possible. Security teams should prioritize addressing this issue to mitigate potential exploitation risks.