aye468448-eng/cve-2026-0073-android-adbd-authentication-bypassCVE-2026-0073에 대한 PoC, 네트워크 공격자가 무선 디버깅을 통해 이전에 페어링된 기기에 연결할 수 있게 하는 Android ADB 인증 우회.
Research on CVE-2026-0073. An auth bypass allowing any attacker with local network access to connect to an Android device with dev tools and wireless debugging or ADB-over-TCP enabled. Device needs to have been paired before.
This has been tested working on Android 14 in Android Studio. Should work on others as well but exploitability may vary.
Here you can see me removing the key needed to attach to ADB after starting the service and connecting to it to store a key by pairing. Afterwards I cannot connect via ADB.
Here you can see the bypass working without issue even though there is no key present to use for connections.
