CVE-2026-20987

High

Published: 04/02/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

A vulnerability in GalaxyDiagnostics prior to version 3.5.050 is caused by improper input validation. It allows local privileged attackers to execute privileged commands.

Risk Assessment

The risk includes privilege escalation, potentially leading to full compromise of the device or environment if the attacker already has local access.

Recommendation

Immediately update GalaxyDiagnostics to version 3.5.050 or later to remediate the vulnerability.

Other vulnerabilities in GalaxyDiagnostics

CVE-2026-21103Medium
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.

Original NVD description (English source)

Improper input validation in GalaxyDiagnostics prior to version 3.5.050 allows local privileged attackers to execute privileged commands.