CVE-2026-36742

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Hiseeu C90 v5.7.15 is vulnerable to Insecure Permissions. The UART bootloader is accessible when battery is disconnected (hidden/debug mode).

Published 2026-05-13. Last modified 2026-06-17.