Improper Access Control Vulnerability in Samsung Mobile Settings
CVE-2026-21039

6.9MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Devices
Vendor
CVE Published:
10 July 2026

What is CVE-2026-21039?

The vulnerability stems from incorrect access control mechanisms within the Settings of Samsung Mobile. This flaw allows local attackers to manipulate Theft protection settings, potentially compromising device security. Users are encouraged to update their Samsung Mobile Services to the latest release, ensuring robust protection against such threats. For more information, please visit Samsung's security update portal.

Affected Version(s)

Samsung Mobile Devices SMR Jul-2026 Release in Android 15, 16

References

https://security.samsungmobile.com/securityUpdate.smsb?ye...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.