CVE-2026-80253

MediumCVSS 6.8

Published: 03/09/2026(UTC)Updated: 03/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

26th percentile - higher than 26% of all known CVEs

Summary

An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without authentication.

Risk Assessment

The risk is the potential for an attacker with physical access to take control of the device, potentially compromising system or data integrity.

Recommendation

Restrict physical access to the device and implement authentication mechanisms for bootloader commands if possible.

Other vulnerabilities in ShizenBox2

CVE-2026-80254Medium
Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app). If exploited, an attacker who can log in to the product may change the other user's password.

Original NVD description (English source)

An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to the product may execute bootloader commands without authentication.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS