VULNERABILITY INTELLIGENCE
CVE-2026-22072
EPSS probability0.43%
CISA KEVNot currently listed
Published2026-08-17
Last modified2026-09-03
Description
Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.
Weakness classification
- security@oppo.com: CWE-20