VYPR

pppoe_wrapper

by amlogic

CVEs (1)

  • CVE-2026-119737HigNov 2, 2026
    risk 0.51cvss 7.8epss —

    The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a world-writable…