High severity8.8NVD Advisory· Published Jul 9, 2026· Updated Jul 21, 2026

CVE-2026-58378

Description

Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.

Affected products

Allwinner/TV Box TV98llm-fuzzy

Patches

Vulnerability mechanics

References

raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-190-03.jsonnvd
www.cve.org/CVERecordnvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000