CVE-2023-26311

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability in the webview component of OPPO Store app.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-263148.8The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type CVE-2023-263158.8The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filterCVE-2023-263166.1A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whitelist checking funcCVE-2023-263179.8Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses fromCVE-2023-263187.2Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.CVE-2023-263197.2Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command InjCVE-2023-26324.3Jenkins Code Dx Plugin 3.1.0 and earlier stores Code Dx server API keys unencrypted in job config.xml files on the Jenkins controller where CVE-2023-263208.1Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command InjCVE-2023-263219.8A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by CVE-2023-263229.8A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic beingCVE-2023-263239.8A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploCVE-2023-263249.8A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being
CVE-2023-26311: Critical severity, CVSS 9.8 | Vulnix