Description
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Galaxy Store | — | 4.6.02 |
Medium · 5.1
CVE-2026-20976
EUVD-2026-1790GHSA-pxqv-3v4v-fcv9
Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.
Published Jan 9, 2026 · Updated Jan 9, 2026 · Assigned by SamsungMobile