CRITICAL 9.8 NVD

CVE-2026-28606

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/docs/security/bulletin/2026/2026-09-01

Published: 2026-09-08 · Source: NVD · Feed updated: 2026-09-11

This critical severity vulnerability with a CVSS score of 9.8 was published on 2026-09-08 via NVD.

Risk Timeline

CVE Disclosed2026-09-08 · 2 days ago

Remediation Resources

Official Advisory

source.android.com/docs/security/bulletin/2026/2026-09-01

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.