CVE ID :CVE-2026-114357 Published : Oct. 23, 2026, 1:39 p.m. | 35 minutes ago Description :Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 allows an attacker to obtain an unauthenticated shell...

#Sicherheitslücke #Android #IoT

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-114357 - DJI CrystalSky ZS600C ships ADB without authentication (ro.adb.secure=0)

VERWANDTEARTIKEL

Critical Okta Access Gateway Flaw Lets Attackers With Admin Access Execute System Commands

New Node2Shell Node.js RCE Exploit Let Attackers Execute Malicious Code Through Brotli-Compressed Data

CVE-2026-114621 - baserCMS: SQL injection in the admin panel and admin API

CVE-2026-114355 - DJI CrystalSky ZS600C hardware_monitor evaluates attacker-controlled log data as root

CVE-2026-114354 - DJI CrystalSky ZS600C android.dji.server binder transaction 1018 command injection as root

CVE-2026-93639 - Zimbra Collaboration Suite Missing Authorization in ConfigureZimlet Enables Delegated Administrator Privilege Escalation