更新日期：2026 年 11 月 13 日 · Updated 13 November 2026
近期有關 Android 裝置 XCPE 安全事件的報導，可能令部分小雲盒子用戶感到擔心。我們已向小雲產品方了解相關型號及系統更新安排，並整理以下資訊，方便大家檢查。
Recent reports about the XCPE security incident affecting some Android devices may have raised questions for SVICLOUD owners. We have asked the manufacturer about the models concerned and the software updates it has arranged. This page summarises the information available to us.
事件簡介 / What happened?
Google 及安全研究人員近期報告，部分 Android 裝置內的 XCPE 程式曾被用於未經用戶同意的遠端操作及網絡活動。日本資訊通信研究機構（NICT）的研究亦提及部分小雲舊型號。這些研究並不代表每一台同型號設備均受影響。
Google and security researchers have reported that XCPE on certain Android devices was used for unauthorised remote activity and network traffic. Research by Japan’s National Institute of Information and Communications Technology (NICT) also mentions certain older SVICLOUD models. These observations do not mean that every individual device of those models was affected.
根據產品方的說明，問題與先前的供應商及部分舊型號的早期系統版本有關。產品方表示已更換 15P 的供應商，並為相關舊型號安排系統更新。我們正在繼續跟進各型號的更新詳情及確認方式。
The manufacturer says the issue is connected to a previous supplier and early software versions of some older models. It says it changed supplier for the 15P and has arranged software updates for the relevant older models. We are continuing to seek details on the updates and how their results can be verified.
各型號更新資訊 / Model-by-model update
以下為產品方截至 11 月 13 日提供的資訊；實際更新能否下載，請以設備顯示為準：
The following reflects information supplied by the manufacturer as of 13 November. Please check your device for actual update availability.
-
9P：產品方表示，版本 20261110 已於 11 月 11 日透過 OTA 推送，旨在移除 XCPE。
9P: The manufacturer says OTA version 20261110, intended to remove XCPE, was pushed on 11 November. -
9S：產品方表示，版本 20261110 已於 11 月 12 日透過 OTA 推送，旨在移除 XCPE。
9S: The manufacturer says OTA version 20261110, intended to remove XCPE, was pushed on 12 November. -
8S：產品方表示，OTA 更新計劃由 11 月 13 日開始推送；實際供應時間仍待確認。
8S: The manufacturer says an OTA rollout was planned to begin on 13 November. Actual availability remains to be confirmed. -
10P／10S：產品方表示，部分早期版本曾有此問題，並已透過 OTA 版本 20250715 移除相關程式；後續出貨的 10 代產品不再包含該程式。
10P and 10S: The manufacturer says some early versions had the issue and OTA version 20250715 removed the program; later 10-series shipments no longer included it. -
15P：產品方表示已更換供應商，並稱該型號不存在所述問題。
15P: The manufacturer says it changed supplier and that this model does not have the issue described. -
8P：產品方表示該型號並非由涉事供應商生產，並稱不存在所述問題。
8P: The manufacturer says this model was not made by the supplier concerned and does not have the issue described.
以上為產品方提供的說明，並非我們對每台設備或每個韌體版本的獨立安全驗證。10P+ 等未列出的型號，我們仍在向產品方確認。
These are the manufacturer’s statements, not our independent security verification of every device or firmware version. We are still seeking clarification for models not listed, including 10P+.
用戶可以怎樣做？ / What should I do?
- 查看盒子的型號及系統版本，並在設備的系統更新頁面檢查是否有更新。介面名稱可能因型號或系統版本而異。
Check your box’s model and software version, then look for an update on its system update screen. Menu names may vary by model or software version. - 如有官方 OTA 更新，請按設備上的指示操作，更新期間保持電源穩定。請勿使用來源不明的下載連結或自行修改系統檔案。
If an official OTA update is available, follow the on-screen instructions and keep the power connected throughout. Avoid unverified download links and do not modify system files yourself. - 更新後可查看應用程式列表是否仍顯示 XCPE；但看不到該名稱本身並不能證明設備已完全清除所有相關元件。如更新失敗、仍看到 XCPE，或對設備安全有疑慮，請先斷開盒子的網絡連線。
After updating, you can check whether XCPE still appears in the app list, but its absence alone does not establish that all related components have been removed. If the update fails, XCPE remains visible, or you are concerned about your device’s security, disconnect the box from the internet.
我們會繼續跟進，並在取得經確認的新資訊時更新此頁。感謝大家的理解與關注。
We will continue to follow this issue and update this page when further information has been confirmed. Thank you for your understanding.
