Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2026-22077

Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet

Description

OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OPPO OPPO Wallet APP

Default version status: unaffected

  • allaffected

References