CVE-2026-18907

CVE-2026-18907 describes a path traversal vulnerability in the Android app com.talpa.hibrowser (version 2.23.1.1) where the Download File feature allows arbitrary file writes via directory traversal sequences in the filename. Affected component: Download File feature; Root cause: improper sanitiz...