CVE-2025-21079

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL and launch arbitrary activity with Samsung Members privilege. User interaction is required for triggering this vulnerability.

CVSS 3.1

8.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

EPSS

0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-25)

Published

2025-11-05

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

Affected

• samsung:members

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=11

Check your stackJSON