CVE-2026-58378: H616 0 to before *

CVE-2026-58378. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00442 (percentile 0.37426), scored 24-Oct-2026.

Affected technology

H616 · 0 to before *
Allwinner

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Network (remote) · No privileges required · Active user interaction

What an attacker can do

An attacker could request for ADB authorization and gain root level privileges if the victim allows access. Source advisory’s CVSS 4.0 assessment (base score 8.6/10) rates confidentiality, integrity and availability impact as high.

Published 25-Oct-2026 19:51 UTC

CWE: CWE-489
CCR priority: 35.3 /100 (P4)
CVSS 3.1: 8.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · Source advisory
EPSS: 0.00442 · percentile 0.38136 · 2026-10-25
KEV: no

Provenance

FIRST EPSS daily exploit-probability · Source record · observed 2026-10-25 19:52:47.952465+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-25 19:51:06.643138+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-58378.html