CVE-2026-18907highCWE-23

CVE-2026-18907: high-severity vulnerability in TECNO Mobile Hi Browser

PathTravelsal Vulnerability in com.talpa.hibrowser

Published · Updated

Follow this CVE+ Monitor Hi Browser

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.5epss 0.9%
from disclosure to weapon6 days
Published on NVDAug 5
1st PoC+6d
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
TECNO Mobile · Hi Browser
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.