CVE-2026-21056
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
An improper authorization vulnerability in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
Risk Assessment
The risk involves potential leakage of sensitive data about medical or fitness devices, which could compromise user privacy.
Recommendation
It is recommended to immediately update Samsung Health to version 7.00.0.107 or later to remediate the vulnerability.
Other vulnerabilities in Samsung Health
See all- CVE-2026-21082Medium
Relative path traversal vulnerability in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21077Medium
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21076Medium
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
Original NVD description (English source)
Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.