Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2025-20895

Authentication Bypass Using an Alternate Path in Galaxy Store prior to version 4.5.87.6 allows physical attackers to install arbitrary applications to bypass restrictions of Setupwizard.

  • Published: Feb 4, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-20895
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.2
  • AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

No CWE or OWASP classifications available.

Software From Fixed in
samsung / galaxy_store - 4.5.87.6