CVE-2026-21037

Description

Improper input validation in Samsung Members prior to version 5.8.01.5 allows local attackers to access arbitrary URL and launch arbitrary activity with Samsung Members privilege.

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2026&month=06