{"schema_version":1,"title":"Samsung Account vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 4 vulnerabilities in Samsung Account: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-21127, was published on 12 October 2026. 1 vulnerability in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/account","json_url":"https://junglewise.ai/threats/technologies/account.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/account","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":4,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":1,"last_365_days":3},"latest":[{"cve":"CVE-2026-21127","epss":0.0011,"slug":"cve-2026-21127-improper-export-of-android-application-components-in-samsung","title":"Samsung Account improper export of Android application components","severity":"info","exploited":false,"published_at":"2026-10-12T05:17:01.323+00:00","url":"https://junglewise.ai/threats/cve-2026-21127-improper-export-of-android-application-components-in-samsung"},{"cve":"CVE-2026-20994","cvss":6.9,"epss":0.0028,"slug":"cve-2026-20994-samsung-account-url-redirection-and-token-theft","title":"Samsung Account URL redirection and token theft","severity":"info","exploited":false,"published_at":"2026-03-16T14:18:10.29+00:00","url":"https://junglewise.ai/threats/cve-2026-20994-samsung-account-url-redirection-and-token-theft"},{"cve":"CVE-2025-58486","cvss":4,"epss":0.0019,"slug":"cve-2025-58486-improper-input-validation-in-samsung-account-prior-to-version-15","title":"Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.","severity":"medium","exploited":false,"published_at":"2025-12-02T02:15:48.627+00:00","url":"https://junglewise.ai/threats/cve-2025-58486-improper-input-validation-in-samsung-account-prior-to-version-15"},{"cve":"CVE-2025-21076","cvss":5.5,"epss":0.0014,"slug":"cve-2025-21076-improper-handling-of-insufficient-permissions-or-privileges-in","title":"Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows…","severity":"medium","exploited":false,"published_at":"2025-11-05T06:15:33.84+00:00","url":"https://junglewise.ai/threats/cve-2025-21076-improper-handling-of-insufficient-permissions-or-privileges-in"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Samsung Exynos 1380","slug":"exynos-1380","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1380"},{"name":"Samsung Exynos 1480","slug":"exynos-1480","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1480"},{"name":"Samsung Exynos 1580","slug":"exynos-1580","vulnerabilities":37,"url":"https://junglewise.ai/threats/technologies/exynos-1580"},{"name":"Samsung Exynos 2400","slug":"exynos-2400","vulnerabilities":33,"url":"https://junglewise.ai/threats/technologies/exynos-2400"},{"name":"Samsung Exynos 1330","slug":"exynos-1330","vulnerabilities":30,"url":"https://junglewise.ai/threats/technologies/exynos-1330"},{"name":"Samsung Escargot","slug":"escargot","vulnerabilities":28,"url":"https://junglewise.ai/threats/technologies/escargot"},{"name":"Samsung Exynos 2500","slug":"exynos-2500","vulnerabilities":27,"url":"https://junglewise.ai/threats/technologies/exynos-2500"},{"name":"Samsung Exynos 1280","slug":"exynos-1280","vulnerabilities":25,"url":"https://junglewise.ai/threats/technologies/exynos-1280"},{"name":"Samsung Exynos 2200","slug":"exynos-2200","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/exynos-2200"},{"name":"Samsung Exynos W920","slug":"exynos-w920","vulnerabilities":19,"url":"https://junglewise.ai/threats/technologies/exynos-w920"},{"name":"Samsung Exynos 850","slug":"exynos-850","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/exynos-850"},{"name":"Samsung Exynos W930","slug":"exynos-w930","vulnerabilities":18,"url":"https://junglewise.ai/threats/technologies/exynos-w930"}],"technology":{"hub":true,"name":"Samsung Account","slug":"account","vendor":{"hub":true,"name":"Samsung","slug":"samsung","url":"https://junglewise.ai/threats/vendors/samsung"},"aliases":[],"category":"application","homepage":"https://www.samsung.com/us/support/account/","repo_url":"https://www.samsung.com/","description":"An application for managing Samsung user accounts and services on mobile devices.","url":"https://junglewise.ai/threats/technologies/account"},"most_severe":[{"cve":"CVE-2025-21076","cvss":5.5,"epss":0.0014,"slug":"cve-2025-21076-improper-handling-of-insufficient-permissions-or-privileges-in","title":"Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows…","severity":"medium","exploited":false,"published_at":"2025-11-05T06:15:33.84+00:00","url":"https://junglewise.ai/threats/cve-2025-21076-improper-handling-of-insufficient-permissions-or-privileges-in"},{"cve":"CVE-2025-58486","cvss":4,"epss":0.0019,"slug":"cve-2025-58486-improper-input-validation-in-samsung-account-prior-to-version-15","title":"Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.","severity":"medium","exploited":false,"published_at":"2025-12-02T02:15:48.627+00:00","url":"https://junglewise.ai/threats/cve-2025-58486-improper-input-validation-in-samsung-account-prior-to-version-15"},{"cve":"CVE-2026-20994","cvss":6.9,"epss":0.0028,"slug":"cve-2026-20994-samsung-account-url-redirection-and-token-theft","title":"Samsung Account URL redirection and token theft","severity":"info","exploited":false,"published_at":"2026-03-16T14:18:10.29+00:00","url":"https://junglewise.ai/threats/cve-2026-20994-samsung-account-url-redirection-and-token-theft"},{"cve":"CVE-2026-21127","epss":0.0011,"slug":"cve-2026-21127-improper-export-of-android-application-components-in-samsung","title":"Samsung Account improper export of Android application components","severity":"info","exploited":false,"published_at":"2026-10-12T05:17:01.323+00:00","url":"https://junglewise.ai/threats/cve-2026-21127-improper-export-of-android-application-components-in-samsung"}],"generated_at":"2026-11-12T03:07:00.164048+00:00"}