CVE-2026-20976: Samsung Galaxy Store

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper input validation in Galaxy Store prior to version 4.6.02 allows local attacker to execute arbitrary script.

Affected products

• Samsung Galaxy Store: before 4.6.02.0 (fixed in 4.6.02.0)

Published 2026-01-09. Last modified 2026-06-17.