[ Vendor · 4 CVEs ]
Nexbox
CVEs affecting Nexbox published in the last 30 days, plus any Nexbox CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-119737 | 2 Nov 2026 | CVSS 7.8 | Nexbox A95XThe pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection… | |
| CVE-2026-119738 | 2 Nov 2026 | CVSS 5.3 | Nexbox A95XThe VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains… | |
| CVE-2026-119739 | 2 Nov 2026 | CVSS 5.3 | Nexbox A95XThe VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains… | |
| CVE-2026-119740 | 2 Nov 2026 | CVSS 6.8 | Nexbox A95XNexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that… |