CVE-2026-36742

Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnected (hidden/debug mode).

Score

CVSS 3.1 6.8 Medium

Status

Deferred - cve@mitre.org

Published

2026-05-13

Last modified

2026-05-14

Weaknesses

CWE-276

References

• https://github.com/N0tMilk/vulnerability-research
• https://github.com/N0tMilk/vulnerability-research/tree/main/IoT/CVE-2026-36742