CVE-2026-26959

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-26959", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-16T22:20:28.611Z", "datePublished": "2026-02-19T23:16:43.858Z", "dateUpdated": "2026-02-20T15:37:40.828Z"}, "containers": {"cna": {"title": "ADB Explorer Vulnerable to RCE via Insufficient Input Validation", "problemTypes": [{"descriptions": [{"cweId": "CWE-829", "lang": "en", "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-gcgv-2jq7-74rp", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-gcgv-2jq7-74rp"}, {"name": "https://github.com/Alex4SSB/ADB-Explorer/commit/1b9fed20e875f5e74fd04e9889402f969c2d34e4", "tags": ["x_refsource_MISC"], "url": "https://github.com/Alex4SSB/ADB-Explorer/commit/1b9fed20e875f5e74fd04e9889402f969c2d34e4"}, {"name": "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26021", "tags": ["x_refsource_MISC"], "url": "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26021"}], "affected": [{"vendor": "Alex4SSB", "product": "ADB-Explorer", "versions": [{"version": "< 0.9.26021", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-19T23:16:43.858Z"}, "descriptions": [{"lang": "en", "value": "ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below fail to validate the integrity or authenticity of the ADB binary path specified in the ManualAdbPath setting before executing it, allowing arbitrary code execution with the privileges of the current user. An attacker can exploit this by crafting a malicious App.txt settings file that points ManualAdbPath to an arbitrary executable, then convincing a victim to launch the application with a command-line argument directing it to the malicious configuration directory. This vulnerability could be leveraged through social engineering tactics, such as distributing a shortcut bundled with a crafted settings file in an archive, resulting in RCE upon application startup. Thus issue has been fixed in version 0.9.26021."}], "source": {"advisory": "GHSA-gcgv-2jq7-74rp", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-20T15:29:27.297368Z", "id": "CVE-2026-26959", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-20T15:37:40.828Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-26959", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-20T15:29:27.297368Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-20T15:29:28.891Z"}}], "cna": {"title": "ADB Explorer Vulnerable to RCE via Insufficient Input Validation", "source": {"advisory": "GHSA-gcgv-2jq7-74rp", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Alex4SSB", "product": "ADB-Explorer", "versions": [{"status": "affected", "version": "< 0.9.26021"}]}], "references": [{"url": "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-gcgv-2jq7-74rp", "name": "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-gcgv-2jq7-74rp", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/Alex4SSB/ADB-Explorer/commit/1b9fed20e875f5e74fd04e9889402f969c2d34e4", "name": "https://github.com/Alex4SSB/ADB-Explorer/commit/1b9fed20e875f5e74fd04e9889402f969c2d34e4", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26021", "name": "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26021", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below fail to validate the integrity or authenticity of the ADB binary path specified in the ManualAdbPath setting before executing it, allowing arbitrary code execution with the privileges of the current user. An attacker can exploit this by crafting a malicious App.txt settings file that points ManualAdbPath to an arbitrary executable, then convincing a victim to launch the application with a command-line argument directing it to the malicious configuration directory. This vulnerability could be leveraged through social engineering tactics, such as distributing a shortcut bundled with a crafted settings file in an archive, resulting in RCE upon application startup. Thus issue has been fixed in version 0.9.26021."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-829", "description": "CWE-829: Inclusion of Functionality from Untrusted Control Sphere"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-02-19T23:16:43.858Z"}}}, "cveMetadata": {"cveId": "CVE-2026-26959", "state": "PUBLISHED", "dateUpdated": "2026-02-20T15:37:40.828Z", "dateReserved": "2026-02-16T22:20:28.611Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-02-19T23:16:43.858Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "ADB-Explorer", "vendor": "Alex4SSB", "versions": [{"status": "affected", "version": "< 0.9.26021"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ADB Explorer is a fluent UI for ADB on Windows. Versions 0.9.26020 and below fail to validate the integrity or authenticity of the ADB binary path specified in the ManualAdbPath setting before executing it, allowing arbitrary code execution with the privileges of the current user. An attacker can exploit this by crafting a malicious App.txt settings file that points ManualAdbPath to an arbitrary executable, then convincing a victim to launch the application with a command-line argument directing it to the malicious configuration directory. This vulnerability could be leveraged through social engineering tactics, such as distributing a shortcut bundled with a crafted settings file in an archive, resulting in RCE upon application startup. Thus issue has been fixed in version 0.9.26021."}, {"lang": "es", "value": "ADB Explorer es una interfaz de usuario fluida para ADB en Windows. Las versiones 0.9.26020 e inferiores no validan la integridad o autenticidad de la ruta del binario de ADB especificada en la configuraci\u00f3n ManualAdbPath antes de ejecutarlo, lo que permite la ejecuci\u00f3n de c\u00f3digo arbitrario con los privilegios del usuario actual. Un atacante puede explotar esto creando un archivo de configuraci\u00f3n App.txt malicioso que apunte ManualAdbPath a un ejecutable arbitrario, y luego convenciendo a una v\u00edctima para que inicie la aplicaci\u00f3n con un argumento de l\u00ednea de comandos que la dirija al directorio de configuraci\u00f3n malicioso. Esta vulnerabilidad podr\u00eda ser aprovechada mediante t\u00e1cticas de ingenier\u00eda social, como la distribuci\u00f3n de un acceso directo empaquetado con un archivo de configuraci\u00f3n manipulado en un archivo comprimido, lo que resultar\u00eda en RCE al iniciar la aplicaci\u00f3n. Este problema ha sido solucionado en la versi\u00f3n 0.9.26021."}], "id": "CVE-2026-26959", "lastModified": "2026-06-17T10:26:27.093", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-26959", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-20T15:29:27.297368Z", "version": "2.0.3"}}]}, "published": "2026-02-20T00:16:16.000", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/Alex4SSB/ADB-Explorer/commit/1b9fed20e875f5e74fd04e9889402f969c2d34e4"}, {"source": "security-advisories@github.com", "url": "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26021"}, {"source": "security-advisories@github.com", "url": "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-gcgv-2jq7-74rp"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-829"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.9.26021)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "ADB-Explorer", "source": "cna", "vendor": "Alex4SSB"}, "product": "adb-explorer", "vendor": "alex4ssb"}], "analysis": {"en": {"generated_at": "2026-04-17T17:43:39.041183+00:00", "value": {"mitigation_remediation": ["Apply the vendor\u2011released update to ADB Explorer 0.9.26021 or later.", "Restrict the ability to modify the ManualAdbPath setting in the configuration files to trusted administrators.", "Verify that any shortcut or launch script used to start ADB Explorer does not reference untrusted configuration directories and that App.txt files originate from reliable sources."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The issue affects the ADB Explorer utility developed by Alex4SSB for Windows, specifically all releases version 0.9.26020 and earlier. Users should confirm the installed version and update if the affected range applies.", "description_and_impact": "This vulnerability results from the ADB Explorer application failing to verify the integrity or authenticity of the ADB binary path set in the ManualAdbPath configuration. An attacker can craft an App.txt file that points this setting to any executable, which the application will run with the current user\u2019s privileges. The weakness is classified as CWE\u2011829, exposing the application to arbitrary code execution.", "risk_and_exploitability": "The CVSS base score of 7.8 marks the vulnerability as high severity, yet the EPSS score of less than 1% indicates a low likelihood of exploitation at present, and it is not listed in the CISA KEV catalog. Exploitation typically requires social engineering\u2014delivering a malicious configuration directory via a shortcut or other launch method\u2014so environments that routinely run ADB Explorer from untrusted locations or rely on user\u2011supplied launch scripts are at higher risk."}}}}, "created": "2026-02-20T09:53:22.594376+00:00", "updated": "2026-04-17T17:45:24.351820+00:00", "vendors": ["alex4ssb", "alex4ssb$PRODUCT$adb-explorer"]}