CVE-2026-121816: About Time Technologies｜Herowatch Mini - Missing Authentication
Published Nov 4, 2026
·Updated
Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. Unauthenticated remote attackers can connect to the affected device's ADB service and obtain an ADB shell, thereby accessing device resources or performing related operations.
Event History
Nov 4, 2026
CVE Published
via MITRE·06:24 AM
Data Sourced
via MITRE·06:24 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·07:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An unauthenticated remote attacker who can connect to the affected device's ADB service can exploit it. No credentials or user interaction are required.
2
What access does successful exploitation provide?
The attacker can obtain an ADB shell on the device. This can allow access to device resources and the ability to perform related operations.