Improper Input Validation in Samsung Members Product by Samsung
CVE-2026-20985

7HIGH

Key Information:

Vendor

Samsung
Status
Samsung Members
Vendor
CVE Published:
4 February 2026

What is CVE-2026-20985?

A flaw in Samsung Members, prior to version 5.6.00.11, permits remote attackers to exploit improper input validation. This vulnerability enables the potential to connect to arbitrary URLs and launch unintended activities with elevated privileges within Samsung Members. Note that user interaction is necessary to initiate the exploitation of this vulnerability, which raises concerns about user awareness and security measures.

Affected Version(s)

Samsung Members 5.6.00.11

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.