Approved changes feed: RSS · Atom

cpe:2.3:o:mobvoi:tichome_mini_firmware:027-58389:*:*:*:*:*:*:*

part: o version: 027-58389 update: *

VendorMobvoi (633daf3e-78e8-56d3-95d3-adc60ddb1d4a)
ProductTichome Mini Firmware (204e0177-34cd-5488-ad80-98015fd6f31a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26478 vulnerable 2026-06-08 07:53:21.646466 Details available
A shell command injection vulnerability in Mobvoi Tichome Mini smart speaker 012-18853 and 027-58389 allows remote attackers to send a specially crafted UDP datagram and execute arbitrary shell code as the root account.
Published: 2026-03-04T00:00:00.000Z
Updated: 2026-03-04T16:58:25.821Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.