Description
URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Account | — | 15.5.01.1 |
Medium · 6.9
CVE-2026-20994
EUVD-2026-12305GHSA-698m-3cpg-fhpm
URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token.
Published Mar 16, 2026 · Updated May 20, 2026 · Assigned by SamsungMobile