Nexbox has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was November 2026 with 4. The median CVSS is 6.0 (medium).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.0
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-119737High· 7.8Amlogic pppoe_wrapper Command Injection via AF_UNIX Socket55CVE-2026-119740Medium· 6.8Nexbox A95X Amlogic S905X UART Unauthenticated Console Access50CVE-2026-119739Medium· 5.3Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR29CVE-2026-119738Medium· 5.3Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()29
Nexbox vulnerabilities
CVEs affecting Nexbox, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-119740Medium· 6.8PoCNexbox A95X Amlogic S905X UART Unauthenticated Console Access
Nexbox A95X TV boxes built on the Amlogic S905X platform contain an unauthenticated console exposed via an internal UART header on the PCB that allows physical attackers to obtain an interactive shell as uid 2000 (system) without any cre…
CVE-2026-119737High· 7.8PoCAmlogic pppoe_wrapper Command Injection via AF_UNIX Socket
The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sendin…
CVE-2026-119739Medium· 5.3Amlogic DroidLogic SubTitleService Out-of-Bounds Write via VobSub SET_CONTR
The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an out-of-bounds write vulnerability in vob_fill_pixel() that allows remote attackers t…
CVE-2026-119738Medium· 5.3Amlogic DroidLogic SubTitleService Infinite Loop via get_vob_spu()
The VobSub subtitle decoder libsub_vob (part of the Amlogic DroidLogic SubTitleService), as shipped on Nexbox A95X (Amlogic S905X) TV boxes, contains an infinite loop vulnerability in get_vob_spu() that allows unauthenticated network att…