CVE-2026-5777: CWE-306 Missing authentication for critical function in EGate Atom 3X Projector
CVE-2026-5777 is a high-severity vulnerability in the EGate Atom 3X Projector caused by the Android Debug Bridge (ADB) service being exposed over the local network without any authentication or access controls. This allows an unauthenticated attacker on the same network to gain root-level access to the device, resulting in full compromise. The vulnerability is identified as CWE-306 (Missing Authentication for Critical Function). No official patch or remediation guidance is currently available from the vendor. The vulnerability was published in April 2026 and has a CVSS 4. 0 base score of 8. 7, indicating a significant risk. There are no known exploits in the wild at this time.
AI Analysis
Technical Summary
The EGate Atom 3X Projector exposes its Android Debug Bridge (ADB) service on the local network without requiring authentication or implementing access controls. This improper exposure allows any attacker on the same network segment to connect to the ADB service and obtain root privileges on the device. The vulnerability is classified under CWE-306, indicating missing authentication for a critical function. The CVSS 4.0 vector indicates the attack requires adjacent network access, has low attack complexity, no privileges or user interaction needed, and results in high impact on confidentiality, integrity, and availability. No patch or official remediation level has been provided by the vendor as of the publication date.
Potential Impact
An attacker on the same local network can exploit this vulnerability to gain root-level access to the EGate Atom 3X Projector. This level of access allows complete control over the device, potentially enabling unauthorized data access, device manipulation, or disruption of service. The vulnerability poses a high risk to confidentiality, integrity, and availability of the affected device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the projector's local network segment to trusted users only. Disable or restrict the Android Debug Bridge (ADB) service if possible. Monitor for any unusual activity on the device and network. Avoid exposing the device to untrusted networks.
CVE-2026-5777: CWE-306 Missing authentication for critical function in EGate Atom 3X Projector
Description
CVE-2026-5777 is a high-severity vulnerability in the EGate Atom 3X Projector caused by the Android Debug Bridge (ADB) service being exposed over the local network without any authentication or access controls. This allows an unauthenticated attacker on the same network to gain root-level access to the device, resulting in full compromise. The vulnerability is identified as CWE-306 (Missing Authentication for Critical Function). No official patch or remediation guidance is currently available from the vendor. The vulnerability was published in April 2026 and has a CVSS 4. 0 base score of 8. 7, indicating a significant risk. There are no known exploits in the wild at this time.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The EGate Atom 3X Projector exposes its Android Debug Bridge (ADB) service on the local network without requiring authentication or implementing access controls. This improper exposure allows any attacker on the same network segment to connect to the ADB service and obtain root privileges on the device. The vulnerability is classified under CWE-306, indicating missing authentication for a critical function. The CVSS 4.0 vector indicates the attack requires adjacent network access, has low attack complexity, no privileges or user interaction needed, and results in high impact on confidentiality, integrity, and availability. No patch or official remediation level has been provided by the vendor as of the publication date.
Potential Impact
An attacker on the same local network can exploit this vulnerability to gain root-level access to the EGate Atom 3X Projector. This level of access allows complete control over the device, potentially enabling unauthorized data access, device manipulation, or disruption of service. The vulnerability poses a high risk to confidentiality, integrity, and availability of the affected device.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the projector's local network segment to trusted users only. Disable or restrict the Android Debug Bridge (ADB) service if possible. Monitor for any unusual activity on the device and network. Avoid exposing the device to untrusted networks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- CERT-In
- Date Reserved
- 2026-04-08T08:14:40.117Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69d8e7a61cc7ad14dab3dea0
Added to database: 4/10/2026, 12:05:58 PM
Last enriched: 4/10/2026, 12:20:45 PM
Last updated: 4/10/2026, 1:11:57 PM
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.