CVE-2026-21037

None

CVSS

—

EPSS

0.1%

Published

Jun 5, 2026

CISA due date

—

The record

Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege.

Affected packages

Ecosystem	Package	Introduced	Fixed