CVEvulnerability

CVE-2026-58378

8.6 HIGH Published 2026-07-09 Modified 2026-10-25 Official page ↗
Status
Awaiting Analysis
Published
2026-07-09
Last modified
2026-10-25
Assigner
9119a7d8-5eab-497f-8521-727c672e3725
CVSS 4.0 (9119a7d8-5eab-497f-8521-727c672e3725)
8.6 HIGH — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 (9119a7d8-5eab-497f-8521-727c672e3725)
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-489

Description

Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.

Related

Weakness · CWE (1)

  • CWE-489 Active Debug Code weakness

References