CVE-2026-21134: Medium severity Samsung Samsung Flow vulnerability
Published Oct 12, 2026
·Updated
Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.
Affected Software
1 affected component
Samsung Samsung Flow<4.9.22.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Samsung Flowto a version that resolves this vulnerability.Fixed in 4.9.22.4
Event History
Oct 12, 2026
CVE Published
via MITRE·04:57 AM
Data Sourced
via MITRE·04:57 AM
DescriptionWeakness
Data Sourced
via NVD·05:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be adjacent to the affected Samsung Flow device or network environment. No privileges or user interaction are required according to the CVSS vector.
2
What versions are affected?
Samsung Flow versions prior to 4.9.22.4 are affected. Version 4.9.22.4 is identified as the fixed version.
3
What is the likely impact of successful exploitation?
Successful exploitation can allow access to sensitive information. The CVSS assessment also indicates low impacts to integrity and availability.