Skip to content

CVE record · 1 source

CVE-2026-119737

CVSS 7.8

The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection…

Vendor: Nexbox, Amlogic
Product: A95X, Amlogic Android SDK
CVSS v3.1: 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-78
Exposure class: Mobile OS

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

51

CVE NVD 2h ago

The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection…

The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root…

PoC public CVSS 7.8 CVE-2026-119737 Nexbox Amlogic