一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年9月9日

CVE-2026-28606 – In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing

未分类
📑 文章目录

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation.