CVE-2026-20975

Samsung Mobile / Samsung Cloud PUBLISHED

Description (CNA)

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.

Affected (CNA)

Vendor / product	Versions
Samsung Mobile / Samsung Cloud	unaffected 5.6.11

CWE

No CWE identifiers supplied.

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.