CVE-2026-18907 in Hi Browser

Resumen

por MITRE • 2026-08-05

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: TECNOMobile
• Reservar: 2026-08-05
• Divulgación: 2026-08-05
• Moderación: aceptado
• Artículo: VDB-386005
• CPE: listo
• CWE: CWE-22 (confirmado)
• CVSS: 5.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Actividades: bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-18907
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-18907
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-18907/