Skip to content
OpenAdvisories
High · 7.0 CVE-2026-20985 EUVD-2026-5390GHSA-h4mg-9g94-m3mv

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitra…

Published Feb 4, 2026 · Updated Feb 4, 2026 · Assigned by SamsungMobile

Description

Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Members — 5.6.00.11

References