CVE-2026-21056: Samsung Mobile Samsung Health

Medium severity, CVSS 4.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper authorization in Samsung Health prior to version 7.00.0.107 allows local attackers to access connected device information.

Affected products

• Samsung Mobile Samsung Health: before 7.00.0.107 (fixed in 7.00.0.107)

Published 2026-07-10. Last modified 2026-07-10.