Samsung's October 2026 security update is bringing new protections to supported Galaxy phones, but two older models have reportedly been removed from the company's regular patching schedule.
The Galaxy A04s and Galaxy A23 5G were dropped from Samsung's quarterly security maintenance list this month, according to October 7 reporting from Sammy Fans. The reported changes raise questions about how long owners of aging Galaxy phones can expect routine security updates.
For Galaxy owners, the concern goes beyond installing the latest patch. A device can continue functioning normally even after regular security maintenance ends, potentially leaving newly discovered vulnerabilities unresolved.
Which Samsung Galaxy phones are losing regular security updates?
Samsung provides monthly, quarterly, and biannual security updates depending on the device model. As phones age, they may move to less frequent maintenance schedules before eventually being removed from the company's regular maintenance program.
Two Galaxy A-series devices were reportedly removed from the quarterly update list in October:
- Galaxy A04s: Released in 2022, the budget smartphone has reportedly reached the end of routine security support. According to SamMobile, the phone's most recent regular software update included the August 2026 security patch.
- Galaxy A23 5G: Also released in 2022, the midrange phone was reportedly removed from the quarterly maintenance schedule. However, Samsung's firmware records show that at least one regional variant received another software update in October.
The Galaxy A23 5G illustrates why removal from a regular maintenance schedule does not necessarily mean every device variant immediately stops receiving software updates.
Samsung's published firmware history for the Galaxy A23 5G SM-A2360 documents a September 8, 2026 release carrying the August 5 security patch, followed by an October 13 release carrying the September 5 security patch.
Those records confirm that this particular variant received updates in September and October. However, they do not establish whether routine quarterly maintenance will continue.
Owners should therefore check their exact model number, regional firmware history, and carrier information before assuming that all security updates have stopped.
Samsung Galaxy security support: Which models still qualify?
Samsung's official security maintenance schedule identifies devices eligible for recurring security patches.
The following table compares several Galaxy models and their reported maintenance status.
| Galaxy model | Security update schedule | Status |
|---|---|---|
| Galaxy S26 series | Monthly | Listed for scheduled updates |
| Galaxy S25 series | Monthly | Listed for scheduled updates |
| Galaxy S24 series | Monthly | Listed for scheduled updates |
| Galaxy S23 series | Monthly | Listed for scheduled updates |
| Galaxy S22 series | Quarterly | Listed for scheduled updates |
| Galaxy S21 FE 5G | Quarterly | Listed for scheduled updates |
| Galaxy Z Fold5 and Fold6 | Monthly | Listed for scheduled updates |
| Galaxy Z Flip5 and Flip6 | Monthly | Listed for scheduled updates |
| Galaxy Z Fold4 and Flip4 | Quarterly | Listed for scheduled updates |
| Galaxy S21, S21+, S21 Ultra | No regular schedule | No longer listed for routine updates |
| Galaxy A04s | Reportedly removed from quarterly schedule | Routine support reportedly ended |
| Galaxy A23 5G | Reportedly removed from quarterly schedule | October 13 update documented for SM-A2360; future routine support unclear |
The table reflects Samsung's maintenance categories and October 2026 reporting. Update availability can vary by model, region, and carrier. The reported removal of the Galaxy A04s and A23 5G should not be interpreted as confirmation that all future software releases have stopped.
The original Galaxy S21, S21+, and S21 Ultra are no longer listed among Samsung's devices receiving regular security maintenance. The Galaxy S21 FE 5G, however, remains eligible for quarterly updates.
That distinction matters because phones sharing a Galaxy product family name can have different security support timelines.
Why Samsung's October security update matters for older phones
Samsung's October 2026 security bulletin, published October 6, includes fixes from Google's Android security program and 27 Samsung Vulnerabilities and Exposures items.
Among the Samsung-specific issues is CVE-2026-21125, an improper input validation vulnerability affecting Android 14 through Android 17 that could allow local attackers to execute arbitrary code.
Another flaw, CVE-2026-21120, involves a use-after-free vulnerability in the WSM service that could potentially allow local attackers to execute code with system privileges.
Samsung's bulletin describes these vulnerabilities and their potential impact, but it does not establish that they are being actively exploited.
As detailed in eSecurity Planet's October Samsung security update coverage, patches are distributed in stages, with availability varying by device model, region, and carrier.
The concern for older phones extends beyond October's vulnerabilities. In August, Samsung addressed 56 security vulnerabilities across eligible Galaxy devices, including Android and Samsung-specific flaws, as covered in eSecurity Planet's August Galaxy security report.
When a device stops receiving routine security maintenance, newly discovered weaknesses may remain unpatched. That can increase exposure over time, particularly when users rely on older phones for sensitive activities.
An unsupported Galaxy phone is not automatically compromised, nor is it necessarily affected by every vulnerability disclosed in Samsung's October bulletin. Actual exposure depends on its hardware, software version, and installed security fixes.
What Galaxy owners and IT teams should do next
Owners of older Galaxy devices should check whether their phones remain eligible for security updates and whether the latest available patches have been installed.
Three steps can help:
- Check the security patch level. Open Settings, select About phone, then Software information to find the installed Android security patch level. Menu names may vary by model.
- Look for available updates. Navigate to Settings, select Software update, and tap Download and install.
- Confirm ongoing support. Compare the exact model number against Samsung's published maintenance schedule and review carrier or regional update information.
A phone displaying an older security patch is not necessarily vulnerable to every recently disclosed flaw. Some supported devices receive updates less frequently, and not every vulnerability applies to every configuration.
However, owners whose phones are no longer receiving routine security maintenance should evaluate how long they intend to keep using them for banking, email, account authentication, and other sensitive activities.
For businesses that allow employees to access corporate resources through personal smartphones, unsupported devices can pose endpoint security concerns.
IT and security teams should inventory aging Galaxy devices, review installed patch levels, and establish policies for devices that no longer receive regular manufacturer support. Organizations may also need to restrict access to sensitive systems from phones that cannot meet minimum security requirements.
As eSecurity Planet explained in its September Android security update coverage, security patch levels provide a more useful indication of installed security fixes than Android version numbers alone.
The reported removal of the Galaxy A04s and A23 5G from Samsung's quarterly maintenance schedule highlights an important distinction: a smartphone can continue functioning and may receive individual updates even after its routine support status becomes uncertain.
Checking the update schedule now can help Galaxy owners decide whether their current device remains suitable for sensitive everyday activities or whether it is time to plan a replacement.
Related reading: For more on the risks of outdated Android security patches, read eSecurity Planet's report on an Android zero-click vulnerability that could allow nearby attackers to gain remote access without user interaction.