CVE-2026-21134: Medium severity Samsung Samsung Flow vulnerability

Q: Who can exploit this issue?

An attacker must be adjacent to the affected Samsung Flow device or network environment. No privileges or user interaction are required according to the CVSS vector.

Q: What versions are affected?

Samsung Flow versions prior to 4.9.22.4 are affected. Version 4.9.22.4 is identified as the fixed version.

Q: What is the likely impact of successful exploitation?

Successful exploitation can allow access to sensitive information. The CVSS assessment also indicates low impacts to integrity and availability.

Published Oct 12, 2026

Updated

Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.

Affected Software

1 affected component

Samsung Samsung Flow<4.9.22.4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Samsung Flow to a version that resolves this vulnerability.
Fixed in 4.9.22.4

Event History

Oct 12, 2026

CVE Published

via MITRE·04:57 AM

Data Sourced

via MITRE·04:57 AM

DescriptionWeakness

Data Sourced

via NVD·05:17 AM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this issue?

An attacker must be adjacent to the affected Samsung Flow device or network environment. No privileges or user interaction are required according to the CVSS vector.

What versions are affected?

Samsung Flow versions prior to 4.9.22.4 are affected. Version 4.9.22.4 is identified as the fixed version.

What is the likely impact of successful exploitation?

Successful exploitation can allow access to sensitive information. The CVSS assessment also indicates low impacts to integrity and availability.

CVE-2026-21134: Medium severity Samsung Samsung Flow vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What versions are affected?

What is the likely impact of successful exploitation?