As cited
Copy frozen at (site build).
vulnerabilities
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three chained vulnerabilities in LG webOS allow an attacker on the same local network to gain root access to certain smart TV models without requiring a PIN or user interaction. LG released a fix following disclosure by SSD Secure Disclosure on October 12, 2026, and the chain was demonstrated on the 32LQ636BPSA and 27TQ600SW models running webOS 7.5.7-25.
Why it matters: Owners of affected LG smart TV models should apply the available patch immediately, as any device on their home network could compromise the TV without authentication.
- Source published
- First seen by Cybersecurity Tracker