VulnSocial

CVE-2026-26208Disclosure

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Execution. The application attempts to deserialize the App.txt settings file using Newtonsoft.Json with TypeNameHandling set to Objects. This allows an attacker to supply a crafted JSON file containing a gadget chain (e.g., ObjectDataProvider) to execute arbitrary code when the application launches and subsequently saves its settings. This vulnerability is fixed in Beta 0.9.26020.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-02-13); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-02-13: 2Mentions · 2026-02-18: 1Technical Details · 2026-02-13: 1Technical Details · 2026-02-18: 102-1302-18
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-132
Disclosure1General1
2026-02-181
Disclosure1
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-26208 ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserialization leading to Remote Code Execution. The … https://www.cve.org/CVERecord?id=CVE-2026-26208

    Post summary

    The post discloses CVE‑2026‑26208, noting insecure deserialization in ADB Explorer before version 0.9.26020 that can result in remote code execution, without mentioning any PoC, patch, or evidence of active exploitation.

    00011284
    56.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-26208 Remote Code Execution via Insecure Deserialization in ADB Explorer Beta https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-26208

    Post summary

    The post references CVE-2026-26208, noting a remote code execution vulnerability due to insecure deserialization in ADB Explorer Beta, but offers no additional detail beyond the brief headline and a link to a vulnerability database.

    0001031
    4.0K followersView on X
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2026-26208 (CVSS:7.8, HIGH) is Awaiting Analysis. ADB Explorer is a fluent UI for ADB on Windows. Prior to Beta 0.9.26020, ADB Explorer is vulnerable to Insecure Deserial..https://nvd.nist.gov/vuln/detail/CVE-2026-26208 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post reports that CVE-2026-26208, an insecure deserialization flaw in ADB Explorer versions before Beta 0.9.26020, has a CVSS score of 7.8 and is awaiting analysis, with a link to the NVD entry.

    0000055
    171 followersView on X

Explore more

Back to dashboard