CVE-2026-119737 | Nexbox/Amlogic A95X/Android SDK pppoe_wrapper system command injection

November 2, 2026 Yanac

A vulnerability identified as very critical has been detected in Nexbox/Amlogic A95X and Android SDK. The affected element is the function system of the file /dev/socket/pppoe_wrapper of the component pppoe_wrapper. This manipulation causes command injection.

This vulnerability is tracked as CVE-2026-119737. The attack is restricted to local execution. No exploit exists.VulDB Recent EntriesRead More