Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1…
Priority LOW 20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00336 27th percentileScored 2026-11-07
Fix Fixed Samsung Members (Samsung Mobile): 14.0.07.1
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
Remediation
- Fix · CNA Samsung Members (Samsung Mobile) Fixed in 14.0.07.1
Timeline
- 2026-10-02 Threatist record created from CVE-2023-30703
- 2026-10-03 Alias added: GHSA-vxgh-92j5-jvhx
References
More Samsung Members vulnerabilities
- TI-2021-07613 Improper authorization in Samsung Members CVSS 3.1HIGH 8.6
- TI-2025-14945 Path traversal in Samsung Members CVSS 3.1CRITICAL 9.1
- TI-2021-07677 Improper access control in Samsung Members CVSS 3.1HIGH 7.8
- TI-2025-15075 Improper input validation in Samsung Members prior to version 5.5.01.3 allows remote… CVSS 3.1HIGH 8.1
- TI-2026-17002 Improper input validation in Samsung Members prior to version 5.6.00.11 allows remote… CVSS 4.0HIGH 7.0
- TI-2026-17054 Improper input validation in Samsung Members prior to version 5.8.01.5 allows local… CVSS 4.0MEDIUM 6.9
Sources
- CVE-2023-30703 · CVE Program
- CVE-2023-30703 · NVD
- FIRST EPSS
- GHSA-vxgh-92j5-jvhx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences