Path Traversal Vulnerability in Samsung Members Application by Samsung
CVE-2026-20986

5.1MEDIUM

Key Information:

Vendor

Samsung
Status
Chinese Samsung Members
Vendor
CVE Published:
4 February 2026

What is CVE-2026-20986?

The Samsung Members application is susceptible to a path traversal vulnerability that permits local attackers to manipulate file paths. This exposure can enable unauthorized data overwrites, causing potential data loss and integrity issues for users. It is crucial for users to update to version 15.5.05.4 or later to mitigate this risk.

Affected Version(s)

Chinese Samsung Members 15.5.05.4

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.