Vulnerability · Published Apr 10, 2026 · Assigned by CERT-In

CVE-2026-5777Security Misconfiguration Vulnerability in Atom 3x Projector

High 8.7

In plain English

A high-severity missing authentication in Atom 3X Projector from EGate. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).

Severity (CVSS 4.0)8.7High

Exploit odds (30 days)0.3%top 82.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

This vulnerability exists in the Atom 3x Projector due to improper exposure of the Android Debug Bridge (ADB) service over the local network without authentication or access controls. An unauthenticated attacker on the same network can exploit this vulnerability to obtain root-level access, leading to complete compromise of the targeted device.

Affected products (as reported)

Vendor	Product	Versions
EGate	Atom 3X Projector	Wed Jun 18 10:35:47 CST 2025 – before Mar Tue 10 17:57:35 CST 2026

Weakness: CWE-306 · Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0179 third-party-advisory