PT-2026-21842 · Unknown · Adb-Explorer

Agentmisterious · Published 2026-02-25 · Updated 2026-03-02 · CVE-2026-27615

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions ADB Explorer versions prior to Beta 0.9.26022

Description ADB Explorer, a fluent UI for ADB on Windows, allows manipulation of the ManualAdbPath settings variable. This variable defines the path to the ADB binary. Setting this variable to a Universal Naming Convention (UNC) path allows an attacker to point the binary to a remote network resource under their control. Successful exploitation grants the attacker full control over the executed binary, potentially enabling remote code execution on the victim's machine with the privileges of the user running the application. This is achievable by tricking a victim into running a shortcut of the application that references a custom App.txt settings file, which sets the ManualAdbPath.

Recommendations Update to version Beta 0.9.26022 or later.

Exploit

Fix

Weakness Enumeration

CWE-829

CWE-40

Related Identifiers

CVE-2026-27615

GHSA-3F27-JP2G-HWHR

Affected Products

Adb-Explorer

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27615.json · Exploit
• 🔥 https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-3f27-jp2g-hwhr · Exploit
• https://osv.dev/vulnerability/CVE-2026-27615 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-27615 · Security Note
• https://twitter.com/cracbot/status/2028425193841115530 · Twitter Post
• https://twitter.com/CVEnew/status/2026641369863700480 · Twitter Post