PT-2026-6095 · Samsung · Samsung Members

Dimitrios Valsamaras · Publicado 2026-02-04 · Atualizado 2026-02-25 · CVE-2026-20985

Positive Technologies (AI Summary)

CVSS v4.0

7.0

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Samsung Members versions prior to 5.6.00.11

Description Improper input validation in Samsung Members allows remote attackers to connect an arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required to trigger this issue.

Recommendations Update Samsung Members to version 5.6.00.11 or later.

Correção

Identificadores relacionados

CVE-2026-20985

Produtos afetados

Samsung Members

Referências · 5

• https://osv.dev/vulnerability/CVE-2026-20985 · Aviso do Fabricante
• https://t.me/cveNotify/153210 · Publicação no Telegram
• https://t.me/CVEtracker/43689 · Publicação no Telegram
• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=02 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-20985 · Nota de Segurança