CVE-2026-36027

Published: Jul 8, 2026Modified: Jul 10, 2026Deferred

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging (ADB) and Android Debug Bridge components

Related CWEs

CWE-1313

Hardware Allows Activation of Test or Debug Logic at Runtime

During runtime, the hardware allows for test or debug logic (feature) to be activated, which allows for changing the state of the hardware. This feature can alter the intended behavior of the system and allow for alteration and leakage of sensitive data by an adversary.

References (3)

https://code.com

Source: cve@mitre.org

https://code27.com

Source: cve@mitre.org

https://github.com/redr0nin/Code-27-Companion-Hub-Exploits

Source: cve@mitre.org

Timeline

No history available yet.