aye468448-eng/CVE-2026-0073-Android-adbd-authentication-bypass

PoC

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should work on others as well but exploitability may vary.

view exploit source poc_in_githubauthor aye468448-engpublished 2026-08-21catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-0073US	—	0.54% (45th)	Exploit	2026-05-04
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan