CVE-2026-27615— ADB Explorer 安全漏洞

ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)

ADB Explorer is a fluent UI for ADB on Windows. In versions prior to Beta 0.9.26022, ADB-Explorer allows the `ManualAdbPath` settings variable, which determines the path of the ADB binary to be executed, to be set to a Universal Naming Convention (UNC) path in the application's settings file. This allows an attacker to set the binary's path to point to a remote network resource, hosted on an attacker-controlled network share, thus granting the attacker full control over the binary being executed by the app. An attacker may leverage this vulnerability to execute code remotely on a victim's machine with the privileges of the user running the app. Exploitation is made possible by convincing a victim to run a shortcut of the app that points to a custom `App.txt` settings file, which sets `ManualAdbPath` (for example, when downloaded in an archive file). Version Beta 0.9.26022 fixes the issue.

CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

路径遍历：’\UNCsharename'(WindowsUNC共享)

ADB Explorer 安全漏洞

ADB Explorer是Alex B个人开发者的一个ADB的用户界面。 ADB Explorer 0.9.26022之前版本存在安全漏洞，该漏洞源于允许将ManualAdbPath设置变量设置为UNC路径，可能导致攻击者远程执行代码。

N/A

N/A