CVE-2026-21127: Medium severity Samsung Samsung Account vulnerability
Published Oct 12, 2026
·Updated
Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers to access sensitive data.
Affected Software
1 affected component
Samsung Samsung Account<15.7.01.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Accountto a version that resolves this vulnerability.Fixed in 15.7.01.1
Event History
Oct 12, 2026
CVE Published
via MITRE·04:57 AM
Data Sourced
via MITRE·04:57 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
A local attacker can exploit it. The available information does not indicate that remote or unauthenticated exploitation is possible.
2
Which versions are affected?
Samsung Account versions prior to 15.7.01.1 are affected. Version 15.7.01.1 is not described as affected.
3
What is the potential impact?
The issue can allow a local attacker to access sensitive data through improperly exported Android application components.