CVE-2026-21134: Samsung Mobile Samsung Flow

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper authentication in Samsung Flow prior to version 4.9.22.4 allows adjacent attackers to access sensitive information.

Affected products

• Samsung Mobile Samsung Flow: before 4.9.22.4 (fixed in 4.9.22.4)

Published 2026-10-12. Last modified 2026-10-16.