CVE-2026-0073

🤖 CVE-2026-0073 - 无线 ADB 身份验证绕过 📌 概述 CVE-2026-0073 是 Android 无线 ADB（adbd 守护进程）中的一个严重身份验证绕过漏洞 。 同一网络 中的攻击者可以绕过双向 TLS 身份验证，在无需用户批准或事先配对的情况下连接到设备。 关键信息 项目| 详情 ---|--- CVE ID| CVE-2026-0073 严重性| 严重 CVSS 评分| 8.8 受影响组件| adbd（Android 调试桥）- TLS 处理程序 类型| 身份验证绕过 影响| 远程 Shell 访问（shell 用户） 已修补| 2026 年 5 月...

CVE-2026-0073

🔓 CVE-2026-0073：Android adbd 身份验证绕过 针对无线 ADB TLS 认证绕过漏洞的武器化概念验证。 由 Barghest 发现，devtint 武器化 PoC。 📋 概述 CVE-2026-0073 是 Android 调试桥守护进程（adbd）中的一个严重加密逻辑缺陷，可让同一本地网络上的未认证攻击者获得零点击远程 root 访问权限 。 本仓库包含： adbtlsauthbypass.py — 针对 STLS/TLS 认证绕过的简洁独立 PoC。 main.py — 最大化利用框架，具备自动化信息收集、工件提取和持久化注入功能。 加密缺陷 该漏洞存在于...

CVE-2026-0073

In adbdtlsverifycert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote proximal/adjacent code execution as the shell user with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0073

In adbdtlsverifycert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote proximal/adjacent code execution as the shell user with no additional execution privileges needed. User interaction is not needed for...

CVE-2026-0073

CVE-2026-0073 affects Android devices via adbd_tls_verify_cert in auth.cpp, where a logic error could bypass wireless ADB mutual authentication. This could allow remote code execution as the shell user with no extra privileges, requiring no user interaction. Mitigation is to apply the 2026-05-01 ...

CVE-2026-0073

In adbdtlsverifycert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote proximal/adjacent code execution as the shell user with no additional execution privileges needed. User interaction is not needed for...