LIVE FEED

Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiperHardening a Personal Linux Server in an AfternoonMicrosoft 365 outage disrupts Outlook, Teams, and Copilot worldwideCheck Point patches zero-day root escalation flaw exploited against customersHackers Compromise 4,800 GitHub Accounts to Steal Cloud CredentialsHow to Put a Self-Hosted Service Behind SSO and Intrusion Blocking in an AfternoonBaker Tilly notifies clients of data breach at third-party provider

MEDIUM

CVE-2025-58486

Samsung Account vulnerability

Samsung·Account

4.0/ 10

CVSS 3.1

Medium severity

0.20%

EPSS exploit odds

Chance of exploitation in the next 30 days

Higher than 10% of all CVEs

Not listed

CISA KEV catalog

No confirmed in-the-wild exploitation on CISA's list.

Timeline

Published: Dec 2, 2025
Updated: Dec 2, 2025
First covered: Aug 5, 2026
Latest story: 3 months ago

Summary

Improper input validation in Samsung Account prior to version 15.5.01.1 allows local attacker to execute arbitrary script.

Attack profile

Attack vectorLocal

ComplexityLow

PrivilegesNone

User interactionNone

ScopeUnchanged

ConfidentialityLow

IntegrityNone

AvailabilityNone

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected products

Samsung Account

References

CVE.org recordcve.org NVD entrynvd.nist.gov Advisorysecurity.samsungmobile.com