CVE-2024-34596: Samsung Smartthings

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper authentication in SmartThings prior to version 1.8.17 allows remote attackers to bypass the expiration date for members set by the owner.

Affected products

• Samsung Smartthings: before 1.8.17 (fixed in 1.8.17)

Published 2024-07-02. Last modified 2026-06-17.