cvedb.io
CVE-2026-40002
MEDIUM · CVSS 5
EPSS exploitation probability: 0%
Published 2026-04-17T08:16:18.120 · Last modified 2026-06-17T10:44:36.077

Summary

Red Magic 11 Pro (NX809J) contains a vulnerability that allows non-privileged applications to trigger sensitive operations. The vulnerability stems from the lack of validation for applications accessing the service interface. Exploiting this vulnerability, an attacker can write files to specific partitions and set writable system properties.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.