CVE-2026-21075
Received Received - Intake

Improper Authorization in My Galaxy via Custom URL Scheme

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: Samsung Mobile

Description
Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-21075
EUVD
EUVD-2026-55100

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
samsung my_galaxy to 6.3 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an improper authorization issue in the handler for a custom URL scheme in My Galaxy software versions before 6.3. It allows remote attackers to access sensitive information due to insufficient access controls in the URL scheme handler.

Impact Analysis

An attacker could exploit this to access sensitive data on your device if you are using My Galaxy software before version 6.3. This may include personal information or other confidential data stored in the app.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations using affected software may face compliance risks and legal consequences.

Mitigation Strategies

Update My Galaxy to version 6.3 or later to address the improper authorization issue in custom URL scheme handling.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-21075. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart