CVE-2026-119740
Last modified
CVE-2026-119740 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 (system) without any credentials. Attackers with physical access and a USB-to-TTL adapter can leverage this shell to reach the pppoe_wrapper vendor daemon, which contains an OS command injection vulnerability executed as root, resulting in full root-level compromise of the device.. EPSS estimates a 0.79% chance of exploitation in the next 30 days.
Description
Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 (system) without any credentials. Attackers with physical access and a USB-to-TTL adapter can leverage this shell to reach the pppoe_wrapper vendor daemon, which contains an OS command injection vulnerability executed as root, resulting in full root-level compromise of the device.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Nexbox | A95X | A7_S905X_v2_2 20160713 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-119740?
How severe is CVE-2026-119740?
How do I fix CVE-2026-119740?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-119735Munshi (by Petpooja) before 2026-07-13 contained a stored cr…5.4
- CVE-2026-119736Attendo (formerly Petpooja Payroll) Admin Android applicatio…8.2
- CVE-2026-119737The pppoe_wrapper vendor daemon from the Amlogic Android SDK…7.8
- CVE-2026-119738The VobSub subtitle decoder libsub_vob (part of the Amlogic …5.3
- CVE-2026-119739The VobSub subtitle decoder libsub_vob (part of the Amlogic …5.3
- CVE-2026-11974The wp-media-folder-addon WordPress plugin before 4.1.7 does…8.6
- CVE-2026-119741rsync before 3.5.2 contains a denial of service vulnerabilit…7.5
- CVE-2026-119742Nagios XI before 2026R2 contains an OS command injection vul…7.2
- CVE-2026-119745Sender plugin for WordPress before 2.11.3 contains a missing…4.3
- CVE-2026-119746ProSoft Technology ICX35 devices (X35-HWC-A and ICX35-HWC-E)…5.9
- CVE-2026-119747The GetPaid plugin for WordPress before 2.8.63 contains an i…7.1
- CVE-2026-119748The GetPaid plugin for WordPress before 2.8.63 contains an a…6.5
Are you affected by CVE-2026-119740?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST