CVE-2026-28645
MEDIUM
NVD
CVSS Score
6.8
Severity
MEDIUM
Published
Nov 02, 2026
Vendor
unknown
Description
In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling of USB data due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.