Path Traversal Vulnerability in HiBrowser for Android by Talpa
CVE-2026-18907

Currently unrated

Key Information:

Vendor: Tecno Mobile
Status: Hi Browser
Vendor: CVE Published:; 5 August 2026

🔔 Create Tecno Mobile Vulnerability Alert

What is CVE-2026-18907?

A severe path traversal vulnerability exists in the download file feature of HiBrowser version 2.23.1.1 for Android, which permits attackers to exploit directory traversal sequences in filenames. This flaw enables unauthorized file write operations, potentially compromising the integrity and security of the affected device. Users are strongly advised to update to the latest version to mitigate this risk.

Affected Version(s)

Hi Browser 2.23.1.1

References

https://security.tecno.com/SRC/securityUpdates

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Aug 5, 2026
Vulnerability Reserved
Aug 5, 2026

CVE-2026-18907 Data

JSON