Members CVE-2026-20985

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.

An improper authorization vulnerability in Samsung Members "samsungrewards" scheme for deeplink in versions 2.4.83.9 in

Samsung Members versions prior to 15.5.05.4 contain a path traversal vulnerability that enables local attackers to overw

Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity. R

Path traversal vulnerability in Samsung Members prior to version 5.0.00.11 allows attackers to read and write arbitrary

Improper input validation in Samsung Members prior to version 5.2.00.12 allows physical attackers to access data across

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive

Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute cal

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.

Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of servi

Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote attackers to connect arbitrary URL