CVE-2026-21132: Samsung Mobile Samsung Internet

Medium severity, CVSS 6.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper input validation in Samsung Internet prior to version 30.0.5.24 allows remote attackers to inject arbitrary script. User interaction is required for triggering this vulnerability.

Affected products

• Samsung Mobile Samsung Internet: before 30.0.5.24 (fixed in 30.0.5.24)

Published 2026-10-12. Last modified 2026-10-15.