CVE-2026-22077 — Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet

CVE-2026-22077

Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet PUBLISHED

Description (CNA)

OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure.

Affected (CNA)

Vendor / product	Versions
OPPO / OPPO Wallet APP	affected all

CWE

No CWE identifiers supplied.

References

https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-2048652556296790016

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.