CVE-2026-21001

Summary

Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.

Affected Software

VendorProductVersion RangeStatus
Samsung MobileGalaxy Store4.6.03.8unaffected

Weaknesses

  • CWE-35: Path Traversal

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References