anonhaven

CVE-2026-21077

MEDIUM CVSS 4.0: 6.9 EPSS 0.10%
Updated Aug 10, 2026
Samsung Mobile
Parameter Value
CVSS 6.9 (MEDIUM)
Affected Versions before 7.0.0
Type CWE-863 (Incorrect Authorization), CWE-863: Incorrect Authorization
Vendor Samsung Mobile
Public PoC No

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.

Attack Parameters

Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
High
Complete data leak
Integrity
None
No data modification
Availability
None
No disruption

CVSS Vector v4.0

Weakness Type (CWE)

CWE-863 Incorrect Authorization
CWE-863: Incorrect Authorization

Vulnerable Products

samsung mobile:samsung health

References 1

https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=08
NVD
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-21084

Samsung Mobile

6.9

CVE-2026-21083

Samsung Mobile

6.8

CVE-2026-21082

Samsung Mobile

6.9

CVE-2026-21081

Samsung Mobile

5.1

CVE-2026-21080

Samsung Mobile

6.9