CVE-2026-22072: Oppo Health

High severity, CVSS 8.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user tokens.

Affected products

• Oppo Oppo Health

Published 2026-08-17. Last modified 2026-09-03.