Is CVE-2026-0005 actively exploited?

No active exploitation of CVE-2026-0005 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-0005 be exploited remotely?

No. CVE-2026-0005 requires local access to exploit.

What is the CVSS score of CVE-2026-0005?

CVE-2026-0005 has a CVSS score of 6.2 (MEDIUM).

HOME VULNERABILITIESCVE-2026-0005

MEDIUM

CVE-2026-0005

Published: March 2, 2026· Updated: Mar 6, 2026

6.2

CVSS v3.1

EPSS:0.01%probability of exploitation in 30 daysPercentile:0.2th

Official Description

In onServiceDisconnected of KeyguardServiceDelegate.java, there is a possible partial bypass of app pinning allowing limited interaction with other apps without knowing the LSKF due to a missing permission check. This could lead to local information disclosure where the extent of interaction and impact is app-dependent with no additional execution privileges needed. User interaction is not needed for exploitation.

NVD Source

Technical Analysis

CVE-2026-0005 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), with a CVSS base score of 6.2.