CVE-2026-22072

Arbitrary URL Loading in WebView Leading to Token Leakage Risk PUBLISHED

Description (CNA)

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

Vendor / product	Versions
OPPO / OPPO Health	affected 6.2.9

CWE-20

CISA-ADP

No English description supplied.

No references supplied.