CVE-2026-18283: low-severity vulnerability in Sony XAV-9500ES
Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 2.4epss 0.3%
Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authorization on affected installations on Sony XAV-9500ES devices. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the udev rules. A crafted USB device connected to the system can trigger instantiation of otherwise restricted USB device types. An attacker can leverage this vulnerability to bypass authorization on the system. Was ZDI-CAN-28992.
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Sony · XAV-9500ESRelated CVEs — Sony XAV-9500ES
In the same product, most dangerous first.
CVE-2026-18284HIGHSony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation VulnerabilityEPSS 1.0%CVE-2026-18279HIGHSony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.7%CVE-2026-18282HIGHSony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-18281HIGHSony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.5%CVE-2026-18280LOWSony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution VulnerabilityEPSS 0.3%CVE-2026-18278LOWSony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure VulnerabilityEPSS 0.2%