PT-2026-35363 · Oppo · Oppo Wallet

Published 2026-04-27 · Updated 2026-04-27 · CVE-2026-22077

Positive Technologies (AI Summary)

CVSS v4.0

5.6

Medium

Base vector

AV:L/AC:H/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:L/U:Amber

Name of the Vulnerable Software and Affected Versions OPPO Wallet APP (affected versions not specified)

Description A trusted domain validation flaw allows attackers to bypass protected interface access restrictions. This may lead to the hijacking of account tokens and the disclosure of sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2026-22077

Affected Products

Oppo Wallet

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-22077 · Security Note
• https://security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-2048652556296790016 · Note
• https://twitter.com/CVEnew/status/2048852249565151349 · Twitter Post
• https://t.me/cveNotify/161032 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2048701889672306915 · Twitter Post
• https://twitter.com/infoflowcloud/status/2048853888296448270 · Twitter Post
• https://t.me/CVEtracker/51911 · Telegram Post