CVE-2026-18907

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-18907", "assignerOrgId": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea", "state": "PUBLISHED", "assignerShortName": "TECNOMobile", "dateReserved": "2026-08-05T01:25:36.338Z", "datePublished": "2026-08-05T01:47:16.191Z", "dateUpdated": "2026-08-06T13:51:48.166Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea", "shortName": "TECNOMobile", "dateUpdated": "2026-08-05T01:47:16.191Z"}, "title": "PathTravelsal Vulnerability in com.talpa.hibrowser", "datePublic": "2026-08-05T01:45:00.000Z", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-23", "description": "CWE-23 Relative path traversal", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "affected": [{"vendor": "TECNO Mobile", "product": "Hi Browser", "packageName": "com.talpa.hibrowser", "versions": [{"status": "affected", "version": "2.23.1.1"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.  "}]}], "references": [{"url": "https://security.tecno.com/SRC/securityUpdates"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-08-06T13:50:57.512359Z", "id": "CVE-2026-18907", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T13:51:48.166Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "PathTravelsal Vulnerability in com.talpa.hibrowser", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "affected": [{"vendor": "TECNO Mobile", "product": "Hi Browser", "versions": [{"status": "affected", "version": "2.23.1.1"}], "packageName": "com.talpa.hibrowser", "defaultStatus": "unaffected"}], "datePublic": "2026-08-05T01:45:00.000Z", "references": [{"url": "https://security.tecno.com/SRC/securityUpdates"}], "x_generator": {"engine": "Vulnogram 1.0.4"}, "descriptions": [{"lang": "en", "value": "Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.", "supportingMedia": [{"type": "text/html", "value": "Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.  ", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-23", "description": "CWE-23 Relative path traversal"}]}], "providerMetadata": {"orgId": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea", "shortName": "TECNOMobile", "dateUpdated": "2026-08-05T01:47:16.191Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-18907", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-06T13:50:57.512359Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-08-06T13:50:43.709Z"}}]}, "cveMetadata": {"cveId": "CVE-2026-18907", "state": "PUBLISHED", "dateUpdated": "2026-08-05T01:47:16.191Z", "dateReserved": "2026-08-05T01:25:36.338Z", "assignerOrgId": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea", "datePublished": "2026-08-05T01:47:16.191Z", "assignerShortName": "TECNOMobile"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageName": "com.talpa.hibrowser", "product": "Hi Browser", "vendor": "TECNO Mobile", "versions": [{"status": "affected", "version": "2.23.1.1"}]}], "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename."}, {"lang": "es", "value": "Salto de ruta en la funci\u00f3n de descarga de archivos en com.talpa.hibrowser 2.23.1.1 en Android permite la escritura arbitraria de archivos mediante secuencias de salto de directorio en el nombre del archivo."}], "id": "CVE-2026-18907", "lastModified": "2026-10-23T21:10:00.157", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-18907", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-06T13:50:57.512359Z", "version": "2.0.3"}}]}, "published": "2026-08-05T02:16:37.950", "references": [{"source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea", "url": "https://security.tecno.com/SRC/securityUpdates"}], "sourceIdentifier": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-23"}], "source": "907edf6c-bf03-423e-ab1a-8da27e1aa1ea", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "2.23.1.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Hi Browser", "source": "cna", "vendor": "TECNO Mobile"}, "product": "hi_browser", "vendor": "tecno_mobile"}], "created": "2026-08-05T04:00:06.477806+00:00", "updated": "2026-08-06T16:45:07.287986+00:00", "vendors": ["tecno_mobile", "tecno_mobile$PRODUCT$hi_browser"]}