Skip to content
New Android Root Exploit Targets Honor Magic6 Pro via CVE-2026-98260

New Android Root Exploit Targets Honor Magic6 Pro via CVE-2026-98260

First seen 8 Nov 2026, 09:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 8, 2026 at 09:46 UTC
  • •The exploit targets the Honor Magic6 Pro using CVE-2026-98260.
  • •It allows root access without system image modification or unlocking.
  • •CVE-2026-98260 was published on October 6, 2026, with a PoC available since October 19.

A new one-click temporary root exploit for the Honor Magic6 Pro has been released, utilizing the CVE-2026-98260 vulnerability. This exploit leverages an use-after-free issue in the Linux kernel related to POSIX thread-level CPU timers, allowing attackers to gain root access without modifying the system image or requiring device unlocking. The exploit installs KernelSU modules that match the device's kernel, providing elevated privileges with uid 0. The tool is distributed as an Android application, and users are warned of potential risks, including device instability or failure to boot. The CVE was published on October 6, 2026, with a public proof-of-concept released shortly after on October 19, 2026. As of now, there are no reports of in the wild, but the potential for misuse exists.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-10-06
CVE-2026-98260 published
The Linux kernel vulnerability related to use-after-free issues was disclosed, affecting non-main threads.
Sploitus
2026-10-19
First public PoC released
A proof-of-concept for CVE-2026-98260 was made available, demonstrating the exploit's capabilities.
Sploitus

More articles in this cluster (3)

Following this threat?

Track CVE-2026-64560 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (22)

1 / 4

Common questions

What devices are affected by this exploit?
The exploit specifically targets the Honor Magic6 Pro (BVL-AN16) using the CVE-2026-98260 vulnerability.
Is there any active exploitation reported?
Currently, there are no confirmed reports of active exploitation in the wild for this vulnerability.
What precautions should users take?
Users should avoid using the exploit until further security assessments are made, as it may lead to device instability.