Vulnerability Bulletins

CVE-2026-18907

   
Affected software ANDROID
 
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-18907