VULNERABILITY INTELLIGENCE

CVE-2026-20975

CVSS score2.1 LOW
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-01-09
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Description

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.

Primary references