Path Traversal in Tecno Mobile Hi Browser

CVE-2026-18907

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.

Affected products

Weakness classification (CWE)

References