CVE-2026-58378

HIGH 8.8

Allwinner TV Box TV98 ADB exposed on network

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

Allwinner H616 TV Box TV98 has ADB enabled and exposed to the network on production. An attacker could request for ADB authorization and gain root level privileges if the victim allows access.

CWE	CWE-489
Vendor	allwinner
Product	h616
Published	Jul 9, 2026

Stay Ahead of the Next One

Get instant alerts for allwinner h616

Be the first to know when new high vulnerabilities affecting allwinner h616 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Allwinner / H616

0 < *

References

NVD ↗ CVE.org ↗ EPSS Data ↗

cve.org: https://www.cve.org/CVERecord?id=CVE-2026-58378 raw.githubusercontent.com: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2026/va-26-190-03.json

Credits

RelunSec