Authorization Flaw in Samsung Health Affects User Data Access
CVE-2026-21076

6.9MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Health
Vendor
CVE Published:
10 August 2026

What is CVE-2026-21076?

An authorization vulnerability in Samsung Health versions before 7.0.0 permits local attackers to gain unauthorized access to sensitive user information, potentially compromising user privacy and data integrity. This flaw emphasizes the critical need for robust authorization mechanisms to protect personal health data within the application. Users are recommended to update their application to the latest version to mitigate this risk.

Affected Version(s)

Samsung Health 7.0.0

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.