CVE-2026-20975

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - mobile.security@samsung.com

Published

2026-01-09

Last modified

2026-01-09

Affected products

• Cloud (Samsung)
• Samsung Cloud (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=01