CVE-2026-20975

CVSS Score & Metrics

Base Score

5.5 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N                                    

Vulnerability Description

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.

Vulnerability Details

Published Date

January 09, 2026

Last Modified

January 15, 2026

CWE ID

NVD-CWE-Other

Source

NVD

Vendor

samsung

Product

cloud

External References

https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=01

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment