CVE-2026-20976

Summary

Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileGalaxy Store4.6.02unaffected

Weaknesses

  • CWE-20: Improper Input Validation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References