CVE-2026-5777

Deferred Deferred - Pending Action

Unauthenticated ADB Exposure in Atom 3x Projector Enables Root Access

Publication date: 2026-04-10

Last updated on: 2026-05-19

Assigner: Indian Computer Emergency Response Team (CERT-In)

Description

This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-10

Last Modified

2026-05-19

Generated

2026-07-06

AI Q&A

2026-04-10

EPSS Evaluated

2026-07-05

NVD

CVE-2026-5777

EUVD

EUVD-2026-21368

Affected Vendors & Products

Vendor	Product	Version / Range
atom	projector	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Atom 3x Projector because the Android Debug Bridge (ADB) service is exposed over the local network without any authentication or access controls.

An attacker who is on the same local network can exploit this flaw to gain root-level access to the device, which means they can fully control and compromise the targeted device.

Impact Analysis

If exploited, this vulnerability allows an unauthenticated attacker on the same network to obtain root-level access to the Atom 3x Projector device.

This level of access can lead to a complete compromise of the device, including unauthorized control, data theft, manipulation, or disruption of device functionality.

Hi! I’m here to help you understand CVE-2026-5777. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70