CVE Catalog

CVE-2026-49185

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

31th percentile - higher than 31% of all known CVEs

Summary

Vulnerability in FieldX MDM: the adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.

Risk Assessment

An attacker can remotely execute arbitrary system commands on the device running FieldX MDM, potentially leading to full device compromise and data access.

Recommendation

Update FieldX MDM to a version that fixes input validation in the adb topic.

Original NVD description (English source)

The FieldX MDM adb messaging topic passes unverified payloads directly into Runtime.exec(), allowing command/instruction injection.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS