CVE-2026-58378
Allwinner TV Box TV98 ADB exposed on network
- State
- Published
- Severity
- 8.6 High
- Published
- Jul 9, 2026
- Updated
- Jul 21, 2026
- Reserved
- Jun 30, 2026
Description
Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | cisa-cg |
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | cisa-cg |
Weaknesses
- CWE-489 Active Debug Code
Affected Products
| Product | Versions |
|---|---|
H616Allwinner |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.