CVE-2026-5777

Published Apr 10, 2026

Last updated 20 days ago

CVSS high 8.7
Mobile device

Overview

Description
This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.
Source
vdisclose@cert-in.org.in
NVD status
Deferred

Risk scores

CVSS 4.0

Type
Secondary
Base score
8.7
Impact score
-
Exploitability score
-
Vector string
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity
HIGH

Weaknesses

vdisclose@cert-in.org.in
CWE-306

Social media

Hype score
Not currently trending

Related CVEs

  1. Android Framework Integer Overflow Vulnerability•CVE-2025-48595
  2. Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to use consistent error responses when handling the /mute command which allows an authenticated team member to enumerate private channels they are not authorized to know about via differing error messages for nonexistent versus private channels. Mattermost Advisory ID: MMSA-2026-00588•CVE-2026-21386
  3. Improper export of android application components in Samsung Assistant prior to version 9.3.10.7 allows local attacker to access saved information.•CVE-2026-20993
  4. Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability•CVE-2026-3910
  5. In validateAddingWindowLw of DisplayPolicy.java, there is a possible way for an app to intercept drag-and-drop events due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.•CVE-2025-48574

References

Sources include official advisories and independent security research.