CVE-2026-21037

Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with…

Medium · published June 5, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
EPSS
0.00105 · 1.0th percentile
Published
2026-06-05T10:15Z
EPSS history
Timeline
  • 05 JUN 10:15Z
    Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with…
    cvelistv5