« Volver al listado

CVE-2026-26208

Estado: AplazadaAlta (7.8)—

ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Execution. The application attempts to deserialize the App.txt settings file using Newtonsoft.Json with TypeNameHandling set to Objects. This allows an attacker to supply a crafted JSON file containing a gadget chain (e.g., ObjectDataProvider) to execute arbitrary code when the application launches and subsequently saves its settings. This vulnerability is fixed in Beta 0.9.26020.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ADB Explorer deserializa JSON malicioso (App.txt) con TypeNameHandling:Objects, permitiendo gadget chains (ObjectDataProvider) para ejecución de código arbitrario al iniciar la aplicación. Requiere interacción del usuario (abrir/usar la app).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Restrict Web-Based ContentPrivileged Account ManagementLimit Software InstallationExecution PreventionBehavior Prevention on EndpointDisable or Remove Feature or Program

Tecnologías afectadas (2)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Alex4ssb — ADB ExplorerAINewtonsoft — JsonAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-26208",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-26208",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-02-13T19:21:34.740562Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "Alex4SSB",
          "product": "ADB-Explorer",
          "versions": [
            {
              "status": "affected",
              "version": "< Beta 0.9.26020"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-02-13T19:17:29.420",
  "references": [
    {
      "url": "https://github.com/Alex4SSB/ADB-Explorer/commit/776f132cede86e1405520f2a28c78276dda5ab5a",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/Alex4SSB/ADB-Explorer/issues/294",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/Alex4SSB/ADB-Explorer/releases/tag/v0.9.26020",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/Alex4SSB/ADB-Explorer/security/advisories/GHSA-49qx-wpxj-p4mh",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-502"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Execution. The application attempts to deserialize the App.txt settings file using Newtonsoft.Json with TypeNameHandling set to Objects. This allows an attacker to supply a crafted JSON file containing a gadget chain (e.g., ObjectDataProvider) to execute arbitrary code when the application launches and subsequently saves its settings. This vulnerability is fixed in Beta 0.9.26020."
    },
    {
      "lang": "es",
      "value": "ADB Explorer es una interfaz de usuario fluida para ADB en Windows. Antes de la Beta 0.9.26020, ADB Explorer es vulnerable a deserialización insegura que conduce a ejecución remota de código. La aplicación intenta deserializar el archivo de configuración App.txt usando Newtonsoft.Json con TypeNameHandling configurado en Objects. Esto permite a un atacante proporcionar un archivo JSON manipulado que contiene una cadena de gadgets (por ejemplo, ObjectDataProvider) para ejecutar código arbitrario cuando la aplicación se inicia y posteriormente guarda su configuración. Esta vulnerabilidad está corregida en la Beta 0.9.26020."
    }
  ],
  "lastModified": "2026-06-17T10:25:56.697",
  "sourceIdentifier": "security-advisories@github.com"
}