CVE-2026-20994CWE-601

URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token

Medium · published March 16, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00124 · 1.9th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-03-16T04:32Z
EPSS history
Timeline
  • 16 MAR 04:32Z
    URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token
    cvelistv5