CVE-2021-26687

—

CVSS 3.1

9.8 critical

EPSS

<1%p44

Published

Feb 4, 2021 (Feb 4, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 (February 2021).

Vendors: google
Products: android
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.