CVE-2026-20975

3 documents3 sources
Severity
2.1LOW
EPSS
0.0%
top 99.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Samsung Cloud
Timeline
PublishedJan 9

Description

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Packages1 packages

▶NVDsamsung/cloud< 5.6.11

🔴Vulnerability Details

2
GHSA
GHSA-6pjr-p3mh-rr6x: Improper handling of insufficient permission in Samsung Cloud prior to version 5↗2026-01-09
▶
CVEList
CVE-2026-20975: Improper handling of insufficient permission in Samsung Cloud prior to version 5↗2026-01-09
▶