CVSS 7.1 · HIGH
CVE-2026-22070
ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.
Ver en NVDAnálisis
Oppo ColorOS Assistant contains a path traversal vulnerability allowing unauthenticated file access. This is a device-specific issue for Oppo users and does not affect general application development or infrastructure.
Severidad
Puntaje: 7.1(HIGH)
Vector:
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:HAV: LOCAL
AC: LOW
PR: NONE
UI: REQUIRED
S: CHANGED
C: NONE
I: LOW
A: HIGH
Tipo de falla (CWE):
CWE-23CWE-22EPSS
Probabilidad de explotación (próx. 30 días): 0.0003 (0.0%)
Percentil: 8.7%
EPSS: 2026-05-06
Afecta
oppo:coloros_assistantDescripción técnica
ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.
Publicada: 30/4/2026, 9:16:02
Última modificación: 5/5/2026, 2:53:05