CVE-2026-20985: Input Validation
Published Feb 4, 2026
·Updated
Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.
Affected Software
2 affected components
Samsung Samsung Members<5.6.00.11
Samsung Members<5.6.00.11
Event History
Feb 4, 2026
CVE Published
via MITRE·06:14 AM
Data Sourced
via MITRE·06:14 AM
DescriptionWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-20985?
CVE-2026-20985 has a medium severity level due to improper input validation.
2
How do I fix CVE-2026-20985?
To fix CVE-2026-20985, update Samsung Members to version 5.6.00.11 or later.
3
What types of attacks can CVE-2026-20985 enable?
CVE-2026-20985 can allow remote attackers to connect arbitrary URLs and launch activities with elevated privileges.
4
Is user interaction necessary to exploit CVE-2026-20985?
Yes, user interaction is required to trigger the exploit of CVE-2026-20985.
5
Which versions of Samsung Members are affected by CVE-2026-20985?
Samsung Members versions prior to 5.6.00.11 are affected by CVE-2026-20985.