PT-2026-6095 · Samsung · Samsung Members

Dimitrios Valsamaras · Published 2026-02-04 · Updated 2026-02-25 · CVE-2026-20985

Positive Technologies (AI Summary)

CVSS v4.0

7.0

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Samsung Members versions prior to 5.6.00.11

Description Improper input validation in Samsung Members allows remote attackers to connect an arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required to trigger this issue.

Recommendations Update Samsung Members to version 5.6.00.11 or later.

Fix

Related Identifiers

CVE-2026-20985

Affected Products

Samsung Members

References · 5

• https://osv.dev/vulnerability/CVE-2026-20985 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=02 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-20985 · Security Note
• https://t.me/cveNotify/153210 · Telegram Post
• https://t.me/CVEtracker/43689 · Telegram Post