CVE-2026-21106

MediumCVSS 5.1

Published: 09/09/2026(UTC)Updated: 10/09/2026(UTC)Translated: 09/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.

Risk Assessment

Risk includes weakening data protection, which could lead to unauthorized data access or loss.

Recommendation

Update Samsung Cloud Assistant to version 9.0.5 or later, which includes the fix.

Other vulnerabilities in Samsung Cloud Assistant

CVE-2025-58484Medium
Incorrect default permissions in Samsung Cloud Assistant prior to version 8.0.03.8 allows a local attacker to access partial data in the sandbox.

Original NVD description (English source)

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS