Security Advisory

CVE-2026-22072

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-17 06:13:58

Last updated 2026-08-17 15:24:32

Assigner OPPO

CVSS score 8.3

State PUBLISHED

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.