Improper Authentication in Samsung Flow Affects Samsung Products
CVE-2026-21134

6.1MEDIUM

Key Information:

Vendor

Samsung
Status
Samsung Flow
Vendor
CVE Published:
12 October 2026

What is CVE-2026-21134?

An improper authentication vulnerability in Samsung Flow, prior to version 4.9.22.4, permits adjacent attackers to gain unauthorized access to sensitive information. This security flaw may lead to data exposure and potential unauthorized actions. Users are advised to update to the latest version to safeguard their data from potential risks.

Affected Version(s)

Samsung Flow 4.9.22.4

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V4

Score:
6.1
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.