What’s Vulnerable › Vulnerabilities

CVE-2025-67264

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-23 · updated 2026-07-05
• Weakness: CWE-78

Description

An OS command injection vulnerability in the com.sprd.engineermode component in Doogee Note59, Note59 Pro, and Note59 Pro+ allows a local attacker to execute arbitrary code and escalate privileges via the EngineerMode ADB shell, due to incomplete patching of CVE-2025-31710

Affected products

• Doogee Note59 Firmware: all versions
• Doogee Note59 Pro+ Firmware: all versions
• Doogee Note59 Pro Firmware: all versions

References

• https://github.com/Skorpion96/unisoc-su/blob/main/CVE-2025-67264.md

Get alerted when CVE-2025-67264 or the next vulnerability affects your stack