Unauthenticated Console Vulnerability in Nexbox A95X TV Boxes by Amlogic
CVE-2026-119740

7HIGH

Key Information:

Vendor

Nexbox

Status
A95x
Vendor
CVE Published:
2 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-119740?

The Nexbox A95X TV boxes utilizing the Amlogic S905X platform are vulnerable to unauthorized access through an exposed internal UART header. This vulnerability allows attackers with physical access, equipped with a USB-to-TTL adapter, to gain an interactive shell with system-level privileges. Exploitation of this access can lead to further vulnerabilities, including OS command injection in the pppoe_wrapper vendor daemon, ultimately enabling full root access and control of the device.

Affected Version(s)

A95X A7_S905X_v2_2 20160713

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-119740 - Proof of Concept

References

https://mstreet97.github.io/security-research/vulnerabili...
technical-descriptionexploit
https://www.vulncheck.com/advisories/nexbox-a95x-amlogic-...
third-party-advisory

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matteo Strada (mstreet)
.