CVE-2026-0073
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to...
- Published
- May 4, 2026
- Updated
- May 5, 2026
- Assigning CNA
- google_android
- Evidence observed
- Aug 8, 2026
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLow · next 30 days
- Percentile
- 44.2%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.
Sources
- CVE-2026-0073Exploit
An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS/Zeroconf scanner to instantly discover randomized Wireless Debugging ports on Android 13+ and establishes a fully interactive raw PTY shell.
CVE-2026-0073
- CVE-2026-0073Exploit
Weaponized proof-of-concept for CVE-2026-0073, an Android adbd authentication bypass enabling zero-click remote root access via Wireless ADB, with post-exploitation modules for profiling, extraction, and persistence.
CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC/Ed25519 key mismatch. PoC exploit for Android 14+.
Security research PoC for CVE-2026-0073: ADB authentication bypass verification
- CVE-2026-0073-ResearchResearch
CVE-2026-0073 is an RCE with a CVSS severity score of 8.3, and here we will explain how it works.
Proof-of-concept exploit for CVE-2026-0073, an Android ADB authentication bypass allowing network attackers to connect to devices with ADB over TCP enabled, tested on Android 14.
- adbHijackerExploit
A PoC tool for the CVE-2026-0073 on android 11+ devices which allows instant zero click RCE on any unpatched device with adb over tcp enabled
CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC
- CVE-2026-0073-PoC-ExploitExploit
Zero-click authentication bypass exploit for Android ADB Wireless Debugging (CVE-2026-0073). Provides interactive shell, command execution, and network scanning for authorized security testing.
CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC
PoC for CVE-2026-0073, an Android ADB authentication bypass enabling network attackers to connect to previously paired devices over wireless debugging.
CVE-2026-0073-Android-ADBD-bypass-POC汉化版
- CVE-2026-0073Exploit
0-Click RCE Android Adb TLS Wireless Debugging
translating original python exploit to C
- PoC-in-GitHubInformational
📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.