Description
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Samsung Mobile | Samsung Health | — | — |
Medium · 4.8
CVE-2026-21056
EUVD-2026-42826GHSA-2qcr-4rxg-q25w
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
Published Jul 10, 2026 · Updated Jul 10, 2026 · Assigned by SamsungMobile