Improper Physical Access Control in ShizenBox2 (dev-conf) - CVE-2026-80253
Published: September 2, 2026
Vulnerability identifier: #VU146709
CSH Severity: Low
CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80253
CWE-ID: CWE-1263
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper physical access control. An attacker with physical access can execute bootloader commands without authentication.
Affected software
ShizenBox2 (dev-conf)
How to mitigate CVE-2026-80253
Install updates from vendor's website.
ShizenBox2 (dev-conf) - update to 1.1.0