Local Privilege Escalation Vulnerability in O+ Connect by Oppo
CVE-2026-22069

7.3HIGH

Key Information:

Vendor

Oppo

Status
O+ Connect
Vendor
CVE Published:
19 May 2026

What is CVE-2026-22069?

A local privilege escalation vulnerability has been identified in O+ Connect, where inadequate validation of caller identity on the pipe interface may allow unauthorized users to gain elevated permissions. This could compromise the integrity and confidentiality of the system, making it essential for users and administrators to apply necessary patches and updates to safeguard their environments.

Affected Version(s)

O+ Connect 16.2.0

References

https://security.oppo.com/en/noticeDetail?notice_only_key...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.