CVE•Published 2026-03-02•Modified 2026-09-08•1 article on news•5 live references•NVD data
CVE-2026-0008Google · Android
Vulnerability data via NVD (ingested)
CVSS v3.1
8.4
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS percentile
0
Exploit Prediction Scoring System · top 100% of all CVEs
Weaknesses (CWE)
Description
In multiple functions of FaceEnroll.kt, there is a possible privilege escalation due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Timeline
Published 2026-03-02
Modified 2026-09-08
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
Shodan · vuln tag0 hosts
vuln:CVE-2026-0008Hosts Shodan has explicitly fingerprinted as vulnerable.
Shodan · OS
os:"Android"Hosts Shodan identified as running Android.
More intel sources (5)
Shodan report
vuln:CVE-2026-0008Country / ASN / product breakdown for the vuln query.
Censys
vulnerabilities.cve_id: CVE-2026-0008Censys host search filtered to this CVE id.
grep.app
CVE-2026-0008Public source-code mentions — fast PoC discovery.
GitHub code
CVE-2026-0008GitHub code search for direct mentions.
Google dork
"CVE-2026-0008" exploit -site:nvd.nist.govWrite-ups and news, NVD excluded.
Known PoCs on GitHub (8)
CVE-2026-00088 repos
tianchong-zerotemp/dianxingunknown
DianXing - AI-Driven End-to-End Code Security Auditing
ugurkocde/IntuneBrewShell
IntuneBrew is a PowerShell-based tool that simplifies the process of uploading and managing macOS applications in Microsoft Intune. It automates the entire workflow from downloadin…
tmatens/compose-lintPython
Security-focused linter for Docker Compose files. Catches dangerous misconfigurations before they reach production. Grounded in OWASP and CIS Docker Benchmark.
Farenhytee/database-sentinelPython
Open-source security audits for Supabase: a read-only MCP server, a CLI agent and a Claude Skill. Finds RLS misconfigurations, exposed keys and risky functions, and returns a score…
cooneycw/claude-power-packPython
Claude Code best practices and MCP second opinion server
jdrains110-beep/Triumph-Synergy-Digital-Financial-EcosystemTypeScript
Quantum Financial System (QFS) built on Pi Network - Quantum-resistant cryptography (Kyber/Dilithium), Supabase RLS + Realtime, Pi SDK 2.0 payments, Fast-Track KYC/KYB, PiRC Protoc…
MichaelLeeHobbs/awesome-hl7-dicomunknown
A curated list of HL7 and DICOM resources, tools, and hard-won field notes for healthcare integration engineers.
tc4dy/CVE-2026-15409-15410-FrameworkPython
CVE-2026-15409/15410 SonicWall SMA1000 multi-exploit Framework - SSRF→Erlang RPC→RCE→root privesc. Features: --detect safe check, --exec, --read-file, --privesc, --rpc, interactive…