CVE-2026-58378 HIGH

CVE-2026-58378: Allwinner TV Box TV98 ADB exposed on network

Vendor Allwinner
Product H616
Weakness CWE-489
Published July 9, 2026
Last update July 21, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.

Key dates

02Disclosure timeline

July 9, 2026 CVE published
July 21, 2026 Record updated