CVE-2026-22077

Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet

Medium · published April 27, 2026

CVSS v4.0
5.6
EPSS
0%
Percentile
0.1
In the wild
Unconfirmed
What it is

OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure.

The record
Technical detail
CVSS v4.0
5.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:A/V:D/RE:L/U:Amber
EPSS
0.00078 · 0.1th percentile
Published
2026-04-27T06:37Z
EPSS history
Timeline
  • 27 APR 06:37Z
    Sensitive Information Disclosure Vulnerability Caused by Trusted Domain Bypass in OPPO Wallet
    cvelistv5