Path Traversal in Tecno Mobile Hi Browser
CVE-2026-18907
Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.
Affected products
- Tecno Mobile Hi Browser — versions 2.23.1.1