Companion Hub CVE-2026-36028
MEDIUMSeverity by source
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Physical access is the attack vector; factory reset requires no credentials (PR:N); full CIA impact as kiosk bypass yields complete device control.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset
AnalysisAI
Kiosk restriction bypass in the Code 27 Companion Hub allows an attacker with physical device access to perform a factory reset that completely circumvents the kiosk protection mechanism, granting full control over the device. The flaw (CWE-288) represents a protection mechanism failure where an alternate path - the factory reset function - is not gated by the same access controls as the restricted kiosk environment. A publicly available proof-of-concept exploit exists on GitHub, and while SSVC rates exploitation status as none and EPSS sits at 0.21% (11th percentile), the availability of working exploit code lowers the barrier for opportunistic physical-access attacks.
Technical ContextAI
CWE-288 (Authentication Bypass Using an Alternate Path or Channel) describes a class of flaws where a protection mechanism can be circumvented by invoking a secondary function or interface that bypasses the intended access control logic. In this case, the Code 27 Companion Hub implements a kiosk mode designed to restrict user interaction to a limited set of authorized functions. However, the device's factory reset capability - an alternate operational path - is not subject to the same restrictions and, when triggered, completely neutralizes kiosk enforcement. The CVSS vector AV:P (Physical) confirms the attack requires hands-on device interaction. CPE data returned n/a, meaning no structured product identifier is available from NVD to scope specific firmware or software versions; affected version ranges must be obtained directly from the vendor advisories at code.com and companion.com.
RemediationAI
No vendor-released patch version has been identified at time of analysis; affected version boundaries and fix availability should be confirmed directly via the vendor advisories at https://code.com and https://companion.com. As an immediate compensating control, physical access to the device's factory reset mechanism should be restricted - this may include disabling or physically securing hardware reset buttons, enabling factory reset protection via device management policy if the platform supports it, or deploying devices in tamper-evident enclosures that alert administrators to physical interference. If the device management platform supports remote lock or wipe, ensure these capabilities are enrolled so a compromised device can be detected and remotely remediated. Note that physical hardening measures may complicate legitimate maintenance workflows and should be balanced against operational needs. Organizations deploying Companion Hub in publicly accessible or semi-public environments (retail, hospitality, digital signage) should treat this as an urgent physical security gap until a vendor patch is available.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today