Is CVE-2026-5777 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2026-5777, but active exploitation has not been confirmed.

Can CVE-2026-5777 be exploited remotely?

Partially. CVE-2026-5777 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-5777?

CVE-2026-5777 has a CVSS score of 8.7 (HIGH).

HOME VULNERABILITIESCVE-2026-5777

HIGHPOC

CVE-2026-5777

CWE-306Published: April 10, 2026· Updated: Apr 13, 2026

8.7

CVSS v3.1

EPSS:0.02%probability of exploitation in 30 daysPercentile:6.7th

Official Description

This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.

NVD Source

Technical Analysis

CVE-2026-5777 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A proof-of-concept (PoC) exploit exists for CVE-2026-5777. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X