CVE-2026-21076CWE-863broken-access-control

CVE-2026-21076

Medium · published August 10, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2026-08-10T13:17Z
Affected products (1)
ProductVersionsFixed in
samsung/health< 7.0.07.0.0
References (1)
https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08 · [email protected]
EPSS history
Timeline
  • 10 AUG 07:42Z
    Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information
    cvelistv5