PT-2026-21842 · Unknown · Adb-Explorer

Agentmisterious · Publicado 2026-02-25 · Atualizado 2026-03-02 · CVE-2026-27615

Positive Technologies (AI Summary)

CVSS v4.0

8.8

Alta

Vetor base

AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions ADB Explorer versions prior to Beta 0.9.26022

Description ADB Explorer, a fluent UI for ADB on Windows, allows manipulation of the ManualAdbPath settings variable. This variable defines the path to the ADB binary. Setting this variable to a Universal Naming Convention (UNC) path allows an attacker to point the binary to a remote network resource under their control. Successful exploitation grants the attacker full control over the executed binary, potentially enabling remote code execution on the victim's machine with the privileges of the user running the application. This is achievable by tricking a victim into running a shortcut of the application that references a custom App.txt settings file, which sets the ManualAdbPath.

Recommendations Update to version Beta 0.9.26022 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-829

CWE-40

Identificadores relacionados

CVE-2026-27615

GHSA-3F27-JP2G-HWHR

Produtos afetados

Adb-Explorer

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27615.json · Exploit
• 🔥 https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-3f27-jp2g-hwhr · Exploit
• https://twitter.com/cracbot/status/2028425193841115530 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-27615 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2026641369863700480 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-27615 · Nota de Segurança