CVE-2026-0073

ADB TLS Auth Bypass Exploit CVE-2026-0073 An automated network scanner and exploitation tool for CVE-2026-0073 , a vulnerability in the Android Debug Bridge daemon adbd that allows unauthenticated Remote Code Execution RCE and interactive shell access via Wireless Debugging. This tool is...

CVE-2026-0073

🤖 CVE-2026-0073 - Wireless ADB Authentication Bypass 📌 Overview CVE-2026-0073 is a critical authentication bypass vulnerability in Android’s Wireless ADB adbd daemon. An attacker on the same network can bypass the mutual TLS authentication and connect to the device without user approval or previo...

CVE-2026-0073-Android-client-TLS-auth-bypass

CVE‑2026‑0073 is a logic bug in Android’s ADB daemon adbd that allows an attacker to bypass TLS mutual authentication and open a remote shell on a device that has wireless debugging enabled and has been paired with any computer at least once. The root cause is a single misused API: the return val...

adbHijacker

CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof-of-concept exploit and network scanner for CVE-2026-0073 , a critical zero-click, no-interaction remote code execution vulnerability in Android adbd's ADB-over-TCP authentication path. The vulnerability is a logic bug in...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS Auth Bypass EVPPKEYcmp type confusion → unauthorized ADB shell 🔥 Overview A critical authentication bypass in Android's ADB daemon adbd allows any attacker on the local network to obtain a full shell on a target device without user authorization. The vulnerability...

picohaxx

now with 100% more source code ™ picohaxx Open source Kernel exploit for Pico 4 devices based on cve-2023-33107 Optimized for a rock-solid 100% success rate and speed 7s on all vulnerable Pico 4 devices. Supported Pico 4 OS Versions: 5.2.0 up to 5.11.0 Chinese or Global 5.9.9. As of this writing...

CVE-2026-0073-Android-adbd-authentication-bypass

Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before. This has been tested working on Android 14 in Android Studio. Should wo...

CVE-2026-78745

CVE-2026-78745 — Remote Code Execution via Android Debug Bridge ADB CVE-2026-78745 affects HiDPT / Weyon HiDPTAndroid devices using the Hi3751V350 and Hi3751V352EDMO platforms. The vulnerability allows a remote attacker to execute arbitrary code through the Android Debug Bridge adbd daemon...

CVE-2026-0073

🤖 CVE-2026-0073 - Wireless ADB Authentication Bypass 📌 Overview CVE-2026-0073 is a critical authentication bypass vulnerability in Android’s Wireless ADB adbd daemon. An attacker on the same network can bypass the mutual TLS authentication and connect to the device without user approval or previo...

CVE-2026-0073

CVE-2026-0073: Android Wireless Debugging adbd Authentication Bypass Disclaimer: This Proof of Concept PoC is provided strictly for educational and authorized security research purposes. Unauthorized access to computer systems is illegal. Always ensure you have explicit permission before testing...

Exploit for Incorrect Implementation of Authentication Algorithm in Google Android

CVE-2026-0073 CVE-2026-0073: Android adbd TLS auth bypass PoC...

CVE-2026-0073-Android-ADBD-bypass-POC

CVE-2026-0073 — Android ADBD TLS Auth Bypass EVPPKEYcmp type confusion → unauthorized ADB shell 🔥 Overview A critical authentication bypass in Android's ADB daemon adbd allows any attacker on the local network to obtain a full shell on a target device without user authorization. The vulnerability...

CVE-2026-114357

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

CVE-2026-114357 DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

CVE-2026-114357 DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

CVE-2026-114357

The DJI CrystalSky ZS600C (firmware v0.3.9.7 through v0.6.6.9 ) is vulnerable to an unauthenticated shell access due to the Android Debug Bridge daemon (adbd) shipping with ro.adb.secure=0 , meaning it lacks host key authorization. Attackers can obtain a shell with uid 2000 , providing a foothold...

EUVD-2026-108990

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

DJI CrystalSky ZS600C authorization issue vulnerability

Versions 0.3.9.7 through 0.6.6.9 of DJI CrystalSky ZS600C contain an authorization issue vulnerability. This vulnerability stems from a lack of authentication for a critical function within the Android Debug Bridge daemon adbd. By default, USB ADB is enabled and host key authorization is disabled...

PT-2026-122099

Missing authentication for a critical function in the Android Debug Bridge daemon adbd in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell uid 2000, a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 no...

CVE-2026-0073

🔓 CVE-2026-0073: Android adbd Authentication Bypass Weaponized Proof of Concept for the Wireless ADB TLS Auth Bypass vulnerability. Discovered by Barghest, Weaponized PoC by devtint. 📋 Overview CVE-2026-0073 is a critical cryptographic logic failure in the Android Debug Bridge daemon adbd that...