CVE-2026-21037

6.9MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Members
Vendor
CVE Published:
5 June 2026

What is CVE-2026-21037?

Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege.

Affected Version(s)

Samsung Members 5.8.01.5

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.