CVE-2026-20985

3 documents3 sources
Severity
7.0HIGH
EPSS
0.0%
top 92.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Samsung Members
Timeline
PublishedFeb 4

Description

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Affected Packages1 packages

▶NVDsamsung/members< 5.6.00.11

🔴Vulnerability Details

2
GHSA
GHSA-h4mg-9g94-m3mv: Improper input validation in Samsung Members prior to version 5↗2026-02-04
▶
CVEList
CVE-2026-20985: Improper input validation in Samsung Members prior to version 5↗2026-02-04
▶
CVE-2026-20985 (HIGH CVSS 7) | Improper input validation in Samsun | cvebase.io