CVE-2026-21082
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Relative path traversal vulnerability in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
Risk Assessment
A local attacker could access confidential data stored by the app, potentially leading to a privacy breach.
Recommendation
Update Samsung Health to the latest version that includes the fix.
Other vulnerabilities in Samsung Health
See all- CVE-2026-21077Medium
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21076Medium
Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
- CVE-2026-21056Medium
An improper authorization vulnerability in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.
- CVE-2025-21059Medium
Improper authorization in Samsung Health prior to version 6.30.5.105 allows local attackers to access data in Samsung Health.
Original NVD description (English source)
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS