{"id":"CVE-2026-69002","kind":"vulnerability","aliases":["CVE-2026-69002"],"related":[],"title":"Samsung framework services: missing permission checks allow unauthorized actions","description":"Incorrect authorization in Samsung framework services due to missing permission checks","summary":"Samsung framework services fail to check permissions properly, so an app can perform actions it should not be allowed to. The sources do not say what an attacker gains beyond that.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["android","other","samsung"],"not_affected_if":[],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-05T03:17:31+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","triaged_at":"2026-11-05T03:33:38+00:00","updated_at":"2026-11-05T03:33:38+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-11-05T03:33:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Samsung framework services: missing permission checks allow unauthorized actions","impact":"medium","summary":"Samsung framework services fail to check permissions properly, so an app can perform actions it should not be allowed to. The sources do not say what an attacker gains beyond that.","audience":"everyone","category":"other","nicknames":[],"who_cares":["samsung","android"],"confidence":0.3,"fix_status":"unknown","needs_auth":"unknown","worst_case":"unknown","analyst_note":"Check the NVD entry and Samsung's security bulletin for affected devices, versions and the fixed patch level.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000571,"input_tokens":4128,"output_tokens":316,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':11A,14A '-69002':12A,15A 'action':9A,32B 'allow':7A,37B 'android':16B 'app':29B 'attack':46B 'author':50C 'beyond':48B 'check':6A,24B,59C 'cve':10A,13A 'due':55C 'fail':22B 'framework':2A,20B,53C 'gain':47B 'incorrect':49C 'miss':4A,57C 'perform':31B 'permiss':5A,25B,58C 'proper':26B 'samsung':1A,18B,19B,52C 'say':43B 'servic':3A,21B,54C 'sourc':40B 'unauthor':8A","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":null,"pkeys":[],"ptokens":[],"labels":["android","other","samsung","unknown"],"campaign_type":null,"first_public_at":"2026-11-05T03:17:31+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-69002","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69002","severity":null,"published_at":"2026-11-05T03:17:31+00:00","modified_at":"2026-11-05T03:17:31+00:00","first_seen_at":"2026-11-05T03:31:44+00:00","fetched_at":"2026-11-05T03:31:44+00:00","note":null}],"documents":[],"exploit_sources":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}