Improper Verification Vulnerability in Samsung Cloud Assistant
CVE-2026-21106

5.1MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Cloud Assistant
Vendor
CVE Published:
9 September 2026

What is CVE-2026-21106?

The Samsung Cloud Assistant has been found to have an improper verification of intent vulnerability that enables local attackers to circumvent enhanced data protection settings, exposing sensitive user data to potential risks. This issue affects versions released prior to 9.0.5, necessitating immediate attention from users to upgrade their applications and secure their data.

Affected Version(s)

Samsung Cloud Assistant 9.0.5

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.