Improper Access Control in Samsung Collection Android Product
CVE-2026-21105

5.9MEDIUM

Key Information:

Vendor

Samsung
Status
Collection
Vendor
CVE Published:
9 September 2026

What is CVE-2026-21105?

An improper access control vulnerability in the Collection application allows local attackers running on affected devices to exploit the flaw, subsequently gaining unauthorized access to sensitive information. The flaw exists in versions prior to 1.0.1.14 for Android 15 and 2.0.02.7 for Android 16, making it critical for users to update to secure versions to mitigate exposure to potential data breaches.

Affected Version(s)

Collection 1.0.1.14 in Android 15 and 2.0.02.7 in Android 16

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.