CVE-2026-28606

critical · 9.8

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation.

9.8

CVSS

0.4%

EPSS (exploit prob.)

32nd

EPSS percentile

2026-09-08

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-287

Affected products

Vendor	Product	Affected versions
google	android	15.0
google	android	16.0
google	android	16.0
google	android	17.0

Check a specific version with /api/v1/cve/match.

References

https://source.android.com/docs/security/bulletin/2026/2026-09-01

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-28606