CVE-2026-0073
43Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.8epss 0.5%
from disclosure to weapon5 days
Published on NVDMay 4
1st PoC+5d
exploitation probability
0.5%top 57% of all CVEs
observed exploitation
nono source reports it
7 public exploit(s)
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Google · Androidpublic PoCs found — 7
githubgithub.com/0xbinder/CVE-2026-0073★ 26githubgithub.com/tc4dy/CVE-2026-0073-PoC-Exploit★ 8githubgithub.com/ctn-Qvo/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN★ 3githubgithub.com/ctnBobong32/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN★ 3githubgithub.com/xqi1337/poc-CVE-2026-0073★ 1githubgithub.com/m00ddy/CVE-2026-0073-Android-client-TLS-auth-bypass★ 0githubgithub.com/fredevsec/CVE-2026-0073★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.