← All advisories

High severity7.1NVD Advisory· Published Apr 30, 2026· Updated Jun 17, 2026

CVE-2026-22070

CVE-2026-22070

Description

ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.

Affected products

2

Oppo/Coloros Assistant2 versions
cpe:2.3:a:oppo:coloros_assistant:1.4.26:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:oppo:coloros_assistant:1.4.26:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

1

security.oppo.com/en/noticeDetailnvdVendor Advisory

News mentions

0

No linked articles in our index yet.