CVE-2026-18907

PathTravelsal Vulnerability in com.talpa.hibrowser PUBLISHED

Description (CNA)

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

Affected (CNA)

Vendor / product	Versions
TECNO Mobile / Hi Browser	affected 2.23.1.1

CWE

CWE-23

References

https://security.tecno.com/SRC/securityUpdates

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.