CVE-2026-21037

Published: Jun 5, 2026Modified: Jun 30, 2026

6.9

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: mobile.security@samsung.com (Secondary)

Description

Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege.

Affected (1)

Products: Samsung: Members

Samsung

1 product

Members

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Samsung Members	Before 5.8.01.5

References (1)

https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=06

Source: mobile.security@samsung.com

Vendor Advisory

Timeline

No history available yet.