Medium severity4.3NVD Advisory· Published Feb 4, 2026· Updated Jun 17, 2026

CVE-2026-20985

Description

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Samsung Mobile/Samsung Membersllm-fuzzy2 versions
<5.6.00.11+ 1 more
- (no CPE)range: <5.6.00.11
- (no CPE)range: 5.6.00.11
Samsung Mobile/Members
cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*
Range: <5.6.00.11

Patches

Vulnerability mechanics

References

security.samsungmobile.com/serviceWeb.smsbnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000