Unrated severityNVD Advisory· Published Feb 4, 2026· Updated Feb 4, 2026

CVE-2026-20985

Description

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Samsung Mobile/Samsung Membersllm-fuzzy2 versions
<5.6.00.11+ 1 more
- (no CPE)range: <5.6.00.11
- (no CPE)range: 5.6.00.11

Patches

Vulnerability mechanics

References

security.samsungmobile.com/serviceWeb.smsbmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000