PT-2026-56894 · Allwinner · H616

Relunsec · Published 2026-07-09 · Updated 2026-07-09 · CVE-2026-58378

NVD

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.

Fix

Weakness Enumeration

CWE-489

Related Identifiers

CVE-2026-58378

Affected Products

H616

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-58378 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-58378 · Security Note
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-190-03.json · Note