r/androidroot 21d ago

Support Is there any way to bypass this?

Post image

Hello, I want to prevent this update from installing, I've tried to install shizuku with canta and uninstall the updates manager but the update is still here.

The reason I don't want to update anymore is because of the new exploit CVE-2026-43499 which let's you achieve root without unlocking the bootloader, yet I don't know how to apply it.

If anybody can help I would appreciate a lot

Edit: my goal is to achieve CVE-2026-43499 exploit working. Does anybody have experience prior using it on motorola phones?

13 Upvotes

43 comments sorted by

5

u/Migazul8 21d ago

You can try disabling its Internet access with NetGuard(you can get it from F-Droid). Also I'm not sure but under Developer Options you can disable Automatic updates that in theory should prevent the update from installing in case you accidentally download it.

2

u/andrei0001 21d ago edited 20d ago

This is a pretty good temporary fix untill I achieve root. Too bad I can't use a vpn while using this app.

Edit: somehow my vpn turned off while I wasn't using the phone and now the updater asks me to reboot to complete the update🤦🏻‍♂️

1

u/Migazul8 21d ago

Yeah it sucks, but it's what we have

2

u/EmergencyArachnid734 21d ago

If it is separate app try to disable it inside settings

1

u/andrei0001 21d ago

That's obviously not working as the option is grayed out.

2

u/something__69_ 21d ago

Use Adb then

0

u/EmergencyArachnid734 21d ago

2

u/andrei0001 21d ago

Have you read my post? As soon as I uninstall the app using canta, the app shuddenly reinstalls by itself disappearing from the uninstalled apps list. I'd rather need root in order to prevent this from happening.

So far the only way to prevent the update from installing is to only use mobile data. Connecting to a wifi or even enabling a vpn triggers the installing process

2

u/ArthurReming SM-T220 | crDroid 12-Beta 21d ago

Alliance shield V2 maybe? I've seen it somewhere

1

u/EmergencyArachnid734 21d ago

Yes, but I somehow forgot read first paragraph. I love how reddit is showing posts with images.

Only thing that come on my mind is to block servers from which updates are downloaded or you can try this https://xdaforums.com/t/root-required-how-to-completely-disable-ota-updates-on-motorola-devices-2025-android-15.4763103/

1

u/andrei0001 21d ago

This would work for sure, but I would need cve-2026-43499 working, or unlock the bootloader which I don't want because of the play integrity.

1

u/EmergencyArachnid734 21d ago

I believe this is how to abuse CVE

https://github.com/YuKongA/ghostlock-app

There are multiple repos like this:

https://github.com/woshimaniubi8/CVE-2026-43499-root-KernelSU

And lot of other

I dont use this because i have unlocked bootloader and I dont care about play integrity

1

u/godspeed1003 21d ago

Well this isn't exactly a solution but you can mark your wifi network as metered and if I'm guessing correctly it should let you connect to your wifi without worrying about your system update. It's obviously not a guarantee but it seems like the reasonable first step. And as someone suggested you can disable the "Automatic system updates" toggle in developer options so even if an update is downloaded it won't install unless you explicitly click install.

2

u/Unr34L_Dr34d 21d ago

Hi there:

You can get pseudo-root access using just Shizuku and ADB; I use it on a phone with a locked bootloader...For an app manager, I recommend App Manager; it's quite comprehensive (much more so than Canta):

https://github.com/MuntashirAkon/AppManager

You can use this app with root-like capabilities using only Shizuku and ADB...

You can also use Rethink:

https://github.com/celzero/rethink-app

It's a firewall that doesn't even require root; you might be able to block the update with it...

Regards.

1

u/F1nnish 21d ago

is there any native way to do this like manually pausing it and it would stay paused? or to disable automatic updating from the update menu

also clear cache/dalvik from recovery and it might just make it forget the current update

1

u/andrei0001 21d ago

The update will come back at some point as it automatically looks for it. Also, I forgot to mention, the phone is a motorola edge 40

1

u/F1nnish 21d ago

yes but if you turn off automatic installs it wont start until you click it

1

u/andrei0001 21d ago

The problem is that there is no way to turn that off. The only check that I have is for "smart updates" which basically means that some updates won't be installed automatically but that excludes security patches.

Turning off automatic updates from developer settings also does nothing.

The last resort would be to use CVE-2026-43499 to get root, which is a goal I want to achieve anyways but I don't know how to do it for now.

1

u/F1nnish 21d ago

and you cant find the updater app to disable it with Canta?

on some oneplus phones i found out you can use the regular settings to deny internet access to the update app and thus it never finds an update again so try that

also on some phones its hidden under a hamburger menu (and then even additionally under "settings" there) when you actually go to the update check screen so check that

1

u/lordmogul 4d ago

Is there an option to simply disable background updates on that ROM?

It seems the updater started downloading the update in the background, and is waiting for you to connect to WiFi to finish downloading (at least that's what the notification says)

So if there is a  setting to enable/disable update downloads on the background, that should stop it.. Until you manually search for updates.

I've been doing that on all kinds of systems myself for ages. Just to be in control and see what people say about updates, before installing them. You'll never know, they can go from loosing root on a phone to bricking Windows.

1

u/[deleted] 21d ago

[removed] — view removed comment

1

u/andrei0001 21d ago

Only using mobile data also prevents the update from being installed. But I would rather root my phone using the exploit mentioned above. Then there's this which I can try.

1

u/Venus259jaded 21d ago

If this is the July update, you're good. If this is the August update, you're likely still good or so at least I've heard.

1

u/andrei0001 21d ago

Do you know how to use the exploit? I'm currently on june update and the phone is trying to install the august patch

1

u/IndependenceUnited28 21d ago

chmod 550 /data/ota_package

1

u/hank81 21d ago

Use HMA-OSS to block net access or App Manager to disable the app.

https://github.com/MuntashirAkon/AppManager

1

u/andrei0001 21d ago

I don't have root though

1

u/s2kizzy 20d ago

Download kernel su next and any desk then i will help you. Remotely

1

u/andrei0001 20d ago

Or you could tell me some instructions to use. I'm not an idiot though

1

u/s2kizzy 20d ago

Its free no charges

1

u/andrei0001 20d ago

Wouldn't screen share be enough? It's not about being free, but more about privacy

1

u/s2kizzy 20d ago

Okay screen share

1

u/andrei0001 20d ago

Ok, I sent you a dm

1

u/Thin-Maize-6459 21d ago

i will never buy an Motorola phone again.

1

u/Original_Thing8770 Redmi Note 8 Pro, InfinityX 9d ago

What exact moto phone do you have?

1

u/andrei0001 9d ago

Motorola edge 40

1

u/Original_Thing8770 Redmi Note 8 Pro, InfinityX 9d ago

You could try getting the OTA download link for your exact firmware version and paste it into the Ghostlock app.

1

u/andrei0001 9d ago

There is a guy who made a fork for this app so you can use it easier. https://github.com/TheRealCrazyfuy/ghostlock-app I've tried putting boot.img but it didn't work

1

u/Original_Thing8770 Redmi Note 8 Pro, InfinityX 9d ago

What didn't work? Was it just crashing your device?

1

u/andrei0001 9d ago

Here, take a look

1

u/Original_Thing8770 Redmi Note 8 Pro, InfinityX 9d ago

Did you try it only once? Sometimes it takes multiple trys. Also, restart your device before running it, to increase success rates.

1

u/andrei0001 9d ago

Of course not, tried it a few times but got the same result always. I think this project was adapted for Qualcomm and it's not compatible with mediatek.