CVE-2026-36028

Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days.

A protection mechanism failure in the Code 27 Companion Hub allows an attacker with physical access to completely bypass kiosk restrictions via a factory reset

Published 2026-07-08. Last modified 2026-07-09.