CVE-2026-36028

MEDIUM

Code 27 Companion Hub - Kiosk Restriction Bypass via Factory Reset

Title source: llm

Description

A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset

References (3)

Core 3

Core References

https://code.com

https://github.com/redr0nin/Code-27-Companion-Hub-Exploits

View Exploit ZIP pw:eip

https://companion.com

Scores

CVSS v3 6.8

EPSS 0.0024

EPSS Percentile 14.8%

Attack Vector PHYSICAL

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-288

Status published

Published Jul 08, 2026

Tracked Since Jul 09, 2026