CVE-2026-58378CWE-489

Allwinner TV Box TV98 ADB exposed on network

High · published July 9, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
37.4
In the wild
Unconfirmed
What it is

Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00442 · 37.4th percentile
Weakness
CWE-489 · Active Debug Code
Published
2026-07-09T17:46Z
EPSS history
Timeline
  • 09 JUL 17:46Z
    Allwinner TV Box TV98 ADB exposed on network
    cvelistv5