SamsungCVE-2026-21056

Samsung Health: improper authorization

CVE-2026-21056 · Published Jul 10, 2026

Medium4.8

No fix yet

Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Details and references

CVSS 4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from: the vendor (its own CVE record or advisory)