CVE-2026-5777

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5777", "assignerOrgId": "66834db9-ab24-42b4-be80-296b2e40335c", "state": "PUBLISHED", "assignerShortName": "CERT-In", "dateReserved": "2026-04-08T08:14:40.117Z", "datePublished": "2026-04-10T11:40:55.335Z", "dateUpdated": "2026-04-10T12:42:10.282Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "66834db9-ab24-42b4-be80-296b2e40335c", "shortName": "CERT-In", "dateUpdated": "2026-04-10T11:40:55.335Z"}, "title": "Security Misconfiguration Vulnerability in Atom 3x Projector", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function", "type": "CWE"}]}], "affected": [{"vendor": "EGate", "product": "Atom 3X Projector", "versions": [{"status": "affected", "version": "Wed Jun 18 10:35:47 CST 2025", "lessThan": "Mar Tue 10 17:57:35 CST 2026", "versionType": "date"}], "defaultStatus": "unaffected"}], "cpeApplicability": [{"operator": "OR", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:egate:atom_3x_projector:*:*:*:*:*:*:*:*", "versionStartIncluding": "wed_jun_18_10_35_47_cst_2025", "versionEndExcluding": "mar_tue_10_17_57_35_cst_2026"}]}]}], "descriptions": [{"lang": "en", "value": "This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device."}]}], "references": [{"url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0179", "tags": ["third-party-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 8.7, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}}], "solutions": [{"lang": "en", "value": "Upgrade Atom 3x Projector to latest version", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Upgrade Atom 3x Projector to latest version"}]}], "credits": [{"lang": "en", "value": "This vulnerability is reported by Chetan Nimbulkar", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.1"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-10T12:42:04.300592Z", "id": "CVE-2026-5777", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-10T12:42:10.282Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-5777", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-10T12:42:04.300592Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-10T12:42:06.780Z"}}], "cna": {"title": "Security Misconfiguration Vulnerability in Atom 3x Projector", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "This vulnerability is reported by Chetan Nimbulkar"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.7, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "EGate", "product": "Atom 3X Projector", "versions": [{"status": "affected", "version": "Wed Jun 18 10:35:47 CST 2025", "lessThan": "Mar Tue 10 17:57:35 CST 2026", "versionType": "date"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Upgrade Atom 3x Projector to latest version", "supportingMedia": [{"type": "text/html", "value": "Upgrade Atom 3x Projector to latest version", "base64": false}]}], "references": [{"url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0179", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "Vulnogram 1.0.1"}, "descriptions": [{"lang": "en", "value": "This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.", "supportingMedia": [{"type": "text/html", "value": "This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306 Missing authentication for critical function"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:egate:atom_3x_projector:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "mar_tue_10_17_57_35_cst_2026", "versionStartIncluding": "wed_jun_18_10_35_47_cst_2025"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "66834db9-ab24-42b4-be80-296b2e40335c", "shortName": "CERT-In", "dateUpdated": "2026-04-10T11:40:55.335Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5777", "state": "PUBLISHED", "dateUpdated": "2026-04-10T12:42:10.282Z", "dateReserved": "2026-04-08T08:14:40.117Z", "assignerOrgId": "66834db9-ab24-42b4-be80-296b2e40335c", "datePublished": "2026-04-10T11:40:55.335Z", "assignerShortName": "CERT-In"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Atom 3X Projector", "vendor": "EGate", "versions": [{"lessThan": "Mar Tue 10 17:57:35 CST 2026", "status": "affected", "version": "Wed Jun 18 10:35:47 CST 2025", "versionType": "date"}]}], "source": "vdisclose@cert-in.org.in"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device."}, {"lang": "es", "value": "Esta vulnerabilidad existe en el Proyector Atom 3x debido a la exposici\u00f3n indebida del servicio Android Debug Bridge (ADB) a trav\u00e9s de la red local sin autenticaci\u00f3n ni controles de acceso. Un atacante no autenticado en la misma red puede explotar esta vulnerabilidad para obtener acceso a nivel de root, lo que lleva al compromiso completo del dispositivo objetivo."}], "id": "CVE-2026-5777", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "vdisclose@cert-in.org.in", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5777", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-10T12:42:04.300592Z", "version": "2.0.3"}}]}, "published": "2026-04-10T12:16:04.480", "references": [{"source": "vdisclose@cert-in.org.in", "url": "https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0179"}], "sourceIdentifier": "vdisclose@cert-in.org.in", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-306"}], "source": "vdisclose@cert-in.org.in", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[Wed Jun 18 10:35:47 CST 2025,Mar Tue 10 17:57:35 CST 2026)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Atom 3X Projector", "source": "cna", "vendor": "EGate"}, "product": "atom_3x_projector", "vendor": "egate"}], "analysis": {"en": {"generated_at": "2026-04-10T13:51:03.554067+00:00", "value": {"mitigation_remediation": ["Upgrade Atom 3x Projector to the latest version", "Disable or restrict the Android Debug Bridge service on the device", "Block or firewall TCP port 5555 from the local network", "Verify that the upgrade has been applied and the service is no longer exposed", "Monitor network traffic and device logs for unauthorized ADB connections"], "summary": {"action": "Immediate Patch", "impact": "Root-Level Device Compromise"}, "threat_synthesis": {"affected_systems": "All models of the EGate Atom 3X Projector are affected, regardless of firmware version. The advisory does not specify a particular revision, so any device running the current SKU should be considered at risk until an upgrade is applied.", "description_and_impact": "The Atom 3x Projector unintentionally exposes the Android Debug Bridge service over the local network without any authentication or access controls. An attacker who can reach the device on the same local network can connect to this service and execute commands with full system privileges, effectively gaining root access to the device. This allows the attacker to modify, delete, or exfiltrate any data stored on the projector, install additional malicious software, or use the compromised device as a pivot point for further attacks on the surrounding network.", "risk_and_exploitability": "The vulnerability receives a CVSS score of 8.7, indicating high severity. No EPSS data is available and the flaw is not listed in the CISA KEV catalog. The attack path is simple: any unauthenticated host on the same local network can scan for the standard ADB port, typically 5555, and establish a connection that grants full root control of the projector."}}}}, "created": "2026-04-10T14:40:47.944643+00:00", "updated": "2026-04-13T13:06:06.620855+00:00", "vendors": ["egate", "egate$PRODUCT$atom_3x_projector"]}