PT-2026-35363 · Oppo · Oppo Wallet App

Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-22077

Mitre

CVSS v4.0

5.6

Medium

AV:L/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:A/V:D/RE:L/U:Amber

OPPO Wallet APP contains a trusted domain validation flaw that allows attackers to bypass protected interface access restrictions, which may lead to account token hijacking and sensitive information disclosure.

Fix

Related Identifiers

CVE-2026-22077

Affected Products

Oppo Wallet App

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-22077 · Security Note
• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-2048652556296790016 · Note