CVE-2026-36028
Possible ATT&CK Techniques 1AI
T1499 · Endpoint Denial of ServiceGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-36028
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Code 27 Companion Hub 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Code 27 Companion Hub是Code 27公司的一个AI数字伙伴终端，支持3D虚拟角色展示、自然语言对话、长期记忆、多模态交互及个性化角色定制。 Code 27 Companion Hub 存在安全漏洞，该漏洞源于保护机制失效，可能导致具有物理访问权限的攻击者通过恢复出厂设置完全绕过终端限制。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2026-36028
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-36028
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2026-36028 (1)
Other References for CVE-2026-36028 (1)
Other References for CVE-2026-36028 (1)
Same Patch Batch · n/a · 2026-07-08 · 15 CVEs total
| CVE-2026-50813 | 6.1 MEDIUM | SQLite 缓冲区错误漏洞 |
| CVE-2026-15036 | 4.3 MEDIUM | Harness gitspaces Endpoint list_all.go getAuthorizedSpaces authorization |
| CVE-2026-24698 | Cisco RV110W 命令注入漏洞 | |
| CVE-2026-24700 | Cisco RV110W 命令注入漏洞 | |
| CVE-2026-24697 | Cisco RV110W 命令注入漏洞 | |
| CVE-2026-24699 | Cisco RV110W 命令注入漏洞 | |
| CVE-2026-50812 | SQLite 异常处理不当漏洞 | |
| CVE-2026-36027 | Code27 Companion Hub 权限许可和访问控制问题漏洞 | |
| CVE-2026-52200 | u0d7i UZ801_v2.1 4G LTE Router 安全漏洞 | |
| CVE-2026-35552 | CAXperts UPVWebServices 安全漏洞 | |
| CVE-2026-51535 | EIPStackGroup OpENer 安全漏洞 | |
| CVE-2026-39178 | SOGo 安全漏洞 | |
| CVE-2026-39179 | SOGo SQL注入漏洞 | |
| CVE-2026-31309 | Mysterium Network Mysterium Node 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
V. Comments for CVE-2026-36028
No comments yet