VYPR
Unrated severityNVD Advisory· Published Sep 8, 2026· Updated Sep 8, 2026

CVE-2026-28606

CVE-2026-28606

Description

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.

CVE-2026-28606 · VYPR