Android CVE-2026-0073 wireless ADB auth flaw

THREAT INTELLIGENCE

Peer Review

4.8

Proven Trust

Dark blue circle with two overlapping checkmarks, one green and one light blue.

ISO 27001 text with a globe outline symbol on a black background.

2025 winner badge for Cyber Security Excellence Awards with gold and black design.

CVE-2026-0073

Google

May 5, 2026

Executive Summary

CVE-2026-0073 affects Android wireless ADB authentication. An attacker on a nearby or adjacent network may execute code as the shell user.

Key Details

Affected Platform

Google

Attack Surface

Recommended Action

Apply vendor patch

Affected Environment

Android devices with security patch levels earlier than 2026-05-05 are exposed. Devices updated to 2026-05-05 include the relevant fixes.

Operational Impact

Attackers can run commands as the shell user without user interaction. This enables access to limited system data and debugging interfaces on devices.

Technical Root Cause

A logic error in adbd_tls_verify_cert in auth.cpp allows bypass of mutual TLS certificate verification. This weakens wireless ADB authentication controls.

Recommended Mitigation

Ensure Android devices are updated to at least the 2026-05-05 security patch level.
Validate Google Play system updates for adbd are applied where available.

Concerned about your exposure?

Our security experts can help you assess affected systems, validate risk and support a safe remediation plan.

Discuss Your Security Exposure Explore MDR for Google

Assess your risk

Identify affected systems

Plan remediation

Practical, vendor-aligned guidance

Get expert support

From our 24/7 security team

Stay ahead of emerging threats

Get the latest threat intelligence and security advisories from Smarttech247.

Full Technical Report

Download the complete analysis, including detailed technical findings and references.

Download Full Report (PDF)

References

Android Security Bulletin 2026-05-01 documents CVE-2026-0073 and fixes.