CVE-2026-36742 - Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions

MEDIUM

Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions

Published May 13, 2026

6.8

MEDIUM

CVSS 3.1

EPSS 0.24%

Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnected (hidden/debug mode).

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

Link	Providers	Tags
https://github.com/N0tMilk/vulnerability-research
https://github.com/N0tMilk/vulnerability-research/tree/main/IoT/CVE-2026-36742		exploit

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 13, 2026

Updated May 14, 2026

Reserved Apr 6, 2026

Updated May 14, 2026

Status Deferred

Modified Jun 17, 2026

Severity n/a

Public date n/a