Read the docs
TI-2026-05059 Aliases CVE-2026-5777GHSA-3jqw-2342-vgxw

Security Misconfiguration Vulnerability in Atom 3x Projector

Priority MEDIUM 40CWE-306Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00331 26th percentileScored 2026-11-07
Fix Fixed Atom 3X Projector (EGate): Mar Tue 10 17:57:35 CST 2026

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
EGateAtom 3X ProjectorWed Jun 18 10:35:47 CST 2025 to before Mar Tue 10 17:57:35 CST 2026Mar Tue 10 17:57:35 CST 2026Patch availableCNA
  • Atom 3X Projector VendorEGate Affected Wed Jun 18 10:35:47 CST 2025 to before Mar Tue 10 17:57:35 CST 2026 Fixed in Mar Tue 10 17:57:35 CST 2026 Patch available CNA

Remediation

  • Fix · CNA Atom 3X Projector (EGate) Fixed in Mar Tue 10 17:57:35 CST 2026

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-5777
  2. 2026-10-03 Alias added: GHSA-3jqw-2342-vgxw
  3. 2026-11-08 Priority changed: LOW → MEDIUM

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences