A95X vulnerabilities

1 known vulnerability in A95X from Nexbox. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  A95X: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-119737Nov 2, 2026Nexbox

  The pppoe_wrapper vendor daemon from the Amlogic Android SDK, as shipped on Nexbox A95X (Amlogic S905/S905X) TV boxes, contains a command injection vulnerability that allows local attackers to execute arbitrary commands as root by sending crafted messages to a