Improper Cryptographic Signature Verification in Samsung Galaxy Store
CVE-2026-21002

5.9MEDIUM

Key Information:

Vendor

Samsung
Status
Galaxy Store
Vendor
CVE Published:
16 March 2026

What is CVE-2026-21002?

A flaw in the Galaxy Store prior to version 4.6.03.8 allows a local attacker to bypass the cryptographic signature verification checks. This vulnerability enables the installation of arbitrary applications, posing significant risks to device security and personal data integrity for users. It is crucial for users to update to the latest version to mitigate potential threats.

Affected Version(s)

Galaxy Store 4.6.03.8

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.