Sign in

6.8 Medium

CVE-2026-20982 Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with…

Description

Path traversal in ShortcutService prior to SMR Feb-2026 Release 1 allows privileged local attacker to create file with system privilege.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Mobile Devices	Versions not published

The 866 CVEs of Samsung Mobile Devices →

CVE-2026-21126 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 6.9 Medium CVE-2026-21125 Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21124 Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1… 8.6 High CVE-2026-21123 Improper privilege management in Locksettings prior to SMR Oct-2026 Release 1 allows local privileged attackers with… 6.7 Medium

Do you use Samsung Mobile Devices?

Track this CVE Watch Samsung Mobile Devices Check my SBOMs

www.cveye.io/en/cve/CVE-2026-20982

Timeline

Published February 4, 2026
Last modified February 4, 2026

References

security.samsungmobile.com security.samsungmobile.com

Track this CVE