CVE-2026-20985high

CVE-2026-20985: high-severity vulnerability in Samsung Members

Published

Follow this CVE+ Monitor Samsung Members

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7epss 0.3%
Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
Samsung Mobile · Samsung Members
Related CVEs — Samsung Members

In the same product, most dangerous first.

CVE-2021-25374HIGHCVE-2021-25374EPSS 3.1%CVE-2021-25438—CVE-2021-25438EPSS 1.7%CVE-2025-21079HIGHCVE-2025-21079EPSS 0.6%CVE-2023-30703LOWCVE-2023-30703EPSS 0.3%CVE-2025-20949MEDIUMCVE-2025-20949EPSS 0.3%CVE-2022-28777MEDIUMCVE-2022-28777EPSS 0.2%