CVE-2026-18907

—

CVSS 3.1

7.5 high

EPSS

<1%p50

Published

Aug 5, 2026 (Aug 5, 2026)

Modified

Sep 9, 2026

Description

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

Weakness: CWE-23
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.