aye468448-eng/CVE-2026-0073-Android-adbd-authentication-bypass

PoC

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should work on others as well but exploitability may vary.

Exploit ansehen Quelle poc_in_githubAutor aye468448-engveröffentlicht 2026-08-21Katalog poc_in_github

ausgenutzte CVEs (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-0073US	—	0.54% (45th)	Exploit	2026-05-04
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent…

scry

Funktionierende Exploits wie dieser zielen auf über das Internet erreichbare Systeme. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan