Description
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.
Exploits (10)
nomisec
FAILED
3 stars
by SecTestAnnaQuinn · poc
https://github.com/SecTestAnnaQuinn/CVE-2026-0073-Android-adbd-authentication-bypass-POC
nomisec
WORKING POC
1 stars
by MartinPSDev · poc
https://github.com/MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC
nomisec
WORKING POC
1 stars
by adityatelange · poc
https://github.com/adityatelange/poc-CVE-2026-0073
github
FAILED
1 stars
by Hex0rc1st · pythonpoc
https://github.com/Hex0rc1st/CVE_POC_monitor/tree/main/article/uploads/demo_1778060285/【已复现】Android ADB 认证绕过漏洞(CVE-2026-0073)安全风险通告
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://source.android.com/docs/security/bulletin/2026/2026-05-01
Scores
CVSS v3
8.8
EPSS
0.0001
EPSS Percentile
1.5%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-303
Status
published
Products (7)
google/android
14.0
google/android
15.0
google/android
16.0 (4 CPE variants)
Google/Android
14
Google/Android
15
Google/Android
16
Google/Android
16-qpr2
Published
May 04, 2026
Tracked Since
May 05, 2026