VULNERABILITY INTELLIGENCE

CVE-2026-21077

CVSS score6.9 MEDIUM

EPSS probability0.13%

CISA KEVNot currently listed

Published2026-08-10

Last modified2026-10-23

CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Description

Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.