Authorization Flaw in Samsung Health App Affects User Data Security
CVE-2026-21077

6.9MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Health
Vendor
CVE Published:
10 August 2026

What is CVE-2026-21077?

A vulnerability in Samsung Health prior to version 7.0.0 allows local attackers to bypass authorization mechanisms and gain access to sensitive information. This can potentially lead to exposure of personal data, highlighting the importance of updating to the latest version for security enhancements and protection.

Affected Version(s)

Samsung Health 7.0.0

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.