CVE-2026-21056

Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information

Medium · published July 10, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
2.4
In the wild
Unconfirmed
What it is

Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00130 · 2.4th percentile
Published
2026-07-10T04:58Z
EPSS history
Timeline
  • 10 JUL 04:58Z
    Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information
    cvelistv5