PT-2026-25599 · Samsung · Samsung Account

Published 2026-03-16 · Updated 2026-03-16 · CVE-2026-20994

Mitre

CVSS v4.0

7.0

7.0

High

Base vector

AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

URL redirection in Samsung Account prior to version 15.5.01.1 allows remote attackers to potentially get access token.

Fix

Related Identifiers

CVE-2026-20994

Affected Products

Samsung Account

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-20994 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=03 · Note