CVE-2026-20994 URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token

Description

URL redirection in Samsung Account prior to version 15.5.01.1 allows local attackers to potentially get access token.

Affected products and versions

Product	Affected versions	Fixed in
Samsung Account 15.5	earliest → < 15.5.01.1	15.5.01.1

Other CVEs of Samsung Account

The 29 CVEs of Samsung Account →

CVE-2026-21127 Improper export of android application components in Samsung Account prior to version 15.7.01.1 allows local attackers… 6.9 Medium CVE-2025-58487 Improper authorization in Samsung Account prior to version 15.5.01.1 allows local attacker to launch arbitrary… 4.0 Medium CVE-2025-58486 Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary… 4.0 Medium CVE-2025-21076 Improper handling of insufficient permissions or privileges in Samsung Account prior to version 15.5.00.18 allows… 5.5 Medium