← Back to CVE search

CVE-2026-18907

Description

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

CVSS 7.5EPSS 0.586%Risk 0.79
View source
Published
2026-08-05 02:16:37
Last modified
2026-08-06 15:16:45
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H