Main Vulnerability Database Vulnerabilities #VU153928

Improper access control in Samsung products - CVE-2026-35495

Published: October 7, 2026

Vulnerability identifier: #VU153928

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-35495

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper handling of SIP packets in IMS stack. A remote attacker can bypass implemented security restrictions and gain unauthorized access to the application.

Affected software

Exynos 1080
Exynos 9110
Exynos Modem 5123
Exynos Modem 5300
Exynos Modem 5400

How to mitigate CVE-2026-35495

Install updates from vendor's website.

External References

https://semiconductor.samsung.com/content/semiconductor/global/support/quality-support/product-security-updates/cve-2026-35495/

Related Security Bulletins