PT-2026-2056 · Samsung · Samsung Cloud

Dawuge · Published 2026-01-09 · Updated 2026-01-09 · CVE-2026-20975

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Cloud versions prior to 5.6.11

Description A flaw exists in Samsung Cloud that involves improper handling of insufficient permissions. This allows local attackers to access specific files in arbitrary paths.

Recommendations Update Samsung Cloud to version 5.6.11 or later.

Fix

Related Identifiers

CVE-2026-20975

Affected Products

Samsung Cloud

References · 5

• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20975 · Security Note
• https://osv.dev/vulnerability/CVE-2026-20975 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/2009577446576706035 · Twitter Post
• https://twitter.com/CVEnew/status/2009526579328606506 · Twitter Post