> TritonInfoSec News
Home / Sep 26, 2026 / Story
0
#8 The Hacker News general September 24, 2026 at 18:10 UTC

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

By [email protected] (The Hacker News)

AI Summary

Researcher Rasmus Moorats disclosed two chained vulnerabilities in OnePlus OxygenOS that allow a malicious Android app requesting no special permissions to achieve full root access on a OnePlus 15 running the latest firmware. OnePlus confirmed the same flaws affect numerous additional OnePlus and OPPO devices, though patches have not yet been released. Until OxygenOS updates are available, users should avoid sideloading apps and restrict installation to trusted sources.

Read full article → https://thehackernews.com/2026/09/unpatched-oneplu…

Relevance score: 76.0/100

# More from September 26

  1. 1
    U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions Krebs on Security
  2. 2
    Kiteworks urges 6-hour server shutdown over potential zero-day attacks BleepingComputer
  3. 3
    Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild The Hacker News
  4. 4
    Hackers steal $351.6 million in Bitget crypto exchange hack BleepingComputer
  5. 5
    WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV The Hacker News
  6. 6
    ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw BleepingComputer
  7. 7
    ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration SecurityWeek
  8. 9
    Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges CyberScoop
  9. 10
    OpenAI agent breached Australian government health website, Albanese says The Record