What is GHSA-826v-5gj2-v5c8?

GHSA-826v-5gj2-v5c8 is a security advisory published by GitHub Security Advisories with Critical severity. Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI...

Which CVE IDs does GHSA-826v-5gj2-v5c8 cover?

GHSA-826v-5gj2-v5c8 covers the following CVE IDs: CVE-2026-114357. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-826v-5gj2-v5c8Critical

Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI...

Vendor

GitHub Security Advisories

Published

October 23, 2026

Last Modified

October 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-114357 →

📋 Description

Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell (uid 2000), a foothold for privilege escalation to root. The device ships with ro.adb.secure=0 (no host key authorization) and USB ADB enabled by default; ADB over TCP is not enabled by default but, once enabled (e.g. via the shipped /system/bin/adbd_tcp.sh or 'setprop persist.adb.tcp.port 5555'), the same unauthenticated shell is reachable over the network (CVSS 4.0 base 9.3).

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-114357
https://cyber-defence-campus.github.io/projects/vulnerabilities/CVE-2026-114357
https://github.com/advisories/GHSA-826v-5gj2-v5c8