Adb Explorer
CVE-2026-27615
HIGH
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessModify ADB-Explorer settings file
-
ExploitSet ManualAdbPath to attacker UNC path
-
ExecutionApplication executes remote binary
-
ImpactArbitrary code execution on victim machine
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V5 - File Handling Path traversal: UNC share
|
| Exploitation Conditions | ADB-Explorer versions prior to Beta 0.9.26022 with writable settings file. Attacker requires local file system access to modify settings configuration. Victim must launch ADB-Explorer, triggering execution of the malicious remote binary from attacker-controlled network share. |
| Impact | CVSS 7.8 (HIGH). Attack vector: Local. Complexity: Low. Privileges required: None. User interaction: Required. Exploitable via remote/network. Public exploit/POC available. |
| Exploit ScenarioDerived | A remote attacker could exploit this vulnerability to set the binary's path to point to a remote network resource, hosted on an attack. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
Adb Explorer contains a vulnerability that allows attackers to set the binary's path to point to a remote network resource, hosted on an attack (CVSS 7.8).
RemediationAI
Monitor vendor advisories for a patch.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
affects Adb Explorer. ADB Explorer is a fluent UI for ADB on Windows. In versions prior to Beta 0.9.26022, ADB-Explorer allows the ManualAdbPath settings variable, which determines the path of the ADB binary to be executed, to be set to a Universal Naming Convention (UNC) path in the application's settings file. This allows an attacker to set the binary's path to point to a remote network resource, hosted on an attacker-controlled network share, thus granting the attacker full control over the binary being executed
Know when Adb Explorer gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
Lifecycle Timeline
2DescriptionGitHub Advisory
ADB Explorer is a fluent UI for ADB on Windows. In versions prior to Beta 0.9.26022, ADB-Explorer allows the ManualAdbPath settings variable, which determines the path of the ADB binary to be executed, to be set to a Universal Naming Convention (UNC) path in the application's settings file. This allows an attacker to set the binary's path to point to a remote network resource, hosted on an attacker-controlled network share, thus granting the attacker full control over the binary being executed by the app. An attacker may leverage this vulnerability to execute code remotely on a victim's machine with the privileges of the user running the app. Exploitation is made possible by convincing a victim to run a shortcut of the app that points to a custom App.txt settings file, which sets ManualAdbPath (for example, when downloaded in an archive file). Version Beta 0.9.26022 fixes the issue.
Executive ViewAI
CVE-2026-27615 affects Adb Explorer and allows attackers to redirect the application to malicious remote resources, potentially leading to unauthorized access or data exfiltration. Organizations using Adb Explorer in development or operational environments face immediate risk of compromise, particularly if the tool processes sensitive data or has elevated system privileges.
Implement network segmentation and firewall rules to restrict outbound connections from systems running Adb Explorer; deploy endpoint detection and response (EDR) solutions to monitor for suspicious binary execution and remote resource access; consider disabling Adb Explorer entirely if not mission-critical; monitor for indicators of compromise related to CVE-2026-27615 exploitation; restrict user privileges on systems running the tool to minimize lateral movement risk.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
Exploit-DB