CVE-2026-15366: Vivo Kids Mode

Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days.

A control logic defect in a specific built-in webpage of Kids Mode allows users to view local gallery photos directly within the page

Affected products

• Vivo Kids Mode: before 4.9.7.0 (fixed in 4.9.7.0)

Published 2026-08-26. Last modified 2026-08-28.