CVE-2026-36027

Medium · 6.8

CVSS

6.8

EPSS

—

Published

Jul 8, 2026

CISA due date

—

The record

An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging (ADB) and Android Debug Bridge components

Affected packages

Ecosystem	Package	Introduced	Fixed