CVE-2026-21106

Awaiting Analysis Awaiting Analysis - Queue

Improper Intent Verification in Samsung Cloud Assistant

Publication date: 2026-09-09

Last updated on: 2026-09-10

Assigner: Samsung Mobile

Description

Improper verification of intent by broadcast receiver in Samsung Cloud Assistant prior to version 9.0.5 allows local attackers to disable enhanced data protection settings.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-10

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-21106

EUVD

EUVD-2026-74647

Affected Vendors & Products

Vendor	Product	Version / Range
samsung	cloud_assistant	to 9.0.5 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-925	The Android application uses a Broadcast Receiver that receives an Intent but does not properly verify that the Intent came from an authorized source.

Attack-Flow Graph

Executive Summary

This vulnerability involves a broadcast receiver in Samsung Cloud Assistant versions before 9.0.5 that fails to properly verify intent. This flaw allows local attackers to disable enhanced data protection settings on affected devices.

Detection Guidance

This vulnerability involves improper intent verification in Samsung Cloud Assistant prior to version 9.0.5. Detection requires checking the installed version of the app and verifying if it is below 9.0.5. Use package managers like 'adb shell dumpsys package com.samsung.android.scloud' to inspect the version.

Impact Analysis

If exploited, this vulnerability could allow an attacker with local access to turn off security features designed to protect your data. This might expose sensitive information stored on your device to unauthorized access.

Compliance Impact

The vulnerability allows local attackers to disable enhanced data protection settings, which could lead to unauthorized access or manipulation of sensitive data. This may impact compliance with standards requiring data protection controls, such as GDPR or HIPAA, by potentially exposing protected information.

Mitigation Strategies

Update Samsung Cloud Assistant to version 9.0.5 or later to address the improper intent verification issue.

Hi! I’m here to help you understand CVE-2026-21106. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70