CVE-2026-20975

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path

Low · published January 9, 2026

CVSS v4.0
2.1
EPSS
0%
Percentile
3.6
In the wild
Unconfirmed
What it is

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00147 · 3.6th percentile
Published
2026-01-09T06:16Z
EPSS history
Timeline
  • 09 JAN 06:16Z
    Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path
    cvelistv5