CVE-2026-21076
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
Risk Assessment
A local attacker could access confidential health data, potentially compromising user privacy.
Recommendation
Update Samsung Health to the latest version that includes the fix.
Other vulnerabilities in Samsung Health
See all- CVE-2026-21082Medium
Relative path traversal vulnerability in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21077Medium
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21056Medium
An improper authorization vulnerability in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
- CVE-2025-21059Medium
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
Original NVD description (English source)
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS