Threats tagged 'ghsa-96vw-w9m3-gj89'

CVE-2026-22072 is a high-severity vulnerability in OPPO Health version 6.2.9 caused by improper input validation (CWE-20). It allows loading arbitrary external URLs through WebView components, which can execute malicious JavaScript code capable of stealing user tokens. No official patch or remediation guidance has been provided by the vendor yet. There are no known exploits in the wild at this time.