BaseFortify

Publication date: 2026-01-09

Last updated on: 2026-01-09

Assigner: Samsung Mobile

Description

Improper handling of insufficient permission in Samsung Cloud prior to version 5.6.11 allows local attackers to access specific files in arbitrary path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-09

Last Modified

2026-01-09

Generated

2026-07-06

AI Q&A

2026-01-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-20975

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	samsung_cloud	to 5.6.11 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is due to improper handling of insufficient permissions in Samsung Cloud versions prior to 5.6.11, which allows local attackers to access specific files at arbitrary paths on the device.

Impact Analysis

The vulnerability could allow a local attacker to access files they should not have permission to view, potentially leading to unauthorized disclosure of sensitive information stored in Samsung Cloud.

Hi! I’m here to help you understand CVE-2026-20975. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70