CVE-2025-20898

4.6 mediumEPSS 0.2%

Medium (4.6) in samsung members. EPSS 0.2% chance of exploitation in the next 30 days.

Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across multiple user profiles.

Severity

4.6 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-11-01)
Published: 2025-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19