CVE-2026-70386 | OnePlus OxygenOS 15.0.0/16.0.0/16.1.0 handleEvent os command injection

October 21, 2026 Yanac

A vulnerability, which was classified as very critical, was found in OnePlus OxygenOS 15.0.0/16.0.0/16.1.0. Affected is the function handleEvent. Executing a manipulation can lead to os command injection.

This vulnerability is registered as CVE-2026-70386. The attack needs to be launched locally. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More