CVE-2026-22078

O+ Connect's lack of authentication for IPC channels led to a local privilege escalation vulnerability. PUBLISHED

Description (CNA)

Because O+ Connect's IPC service does not authenticate clients, external applications can escalate privileges and perform sensitive actions through the IPC channel.

Affected (CNA)

Vendor / product	Versions
OPPO / O+ Connect	affected 16.0.33

CWE

CWE-266

References

https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-2070415238859333632

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.