OnePlus has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.4 (high).

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 8.4
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

OxygenOS 2

Follow OnePlus:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

OnePlus vulnerabilities

CVEs affecting OnePlus, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-70386High· 8.5

today

OnePlus OxygenOS improper neutralization of special elements vulnerability

Improper neutralization of special elements used in an OS command ('OS command injection') and Missing Authorization vulnerability in OnePlus OxygenOS on Android. Any locally installed Android application, with no permissions declared a…

▾ TwilightOnePlus · OxygenOSvia CVEORG

CVE-2026-70387High· 8.4

today

OnePlus OxygenOS exposed dangerous method vulnerability

Exposed dangerous method or function and Incorrect Authorization vulnerability in OnePlus OxygenOS on Android. The olc2 logging HAL exposes a binder method that fork()'s and calls execl("/vendor/bin/sh", "sh", "-c", cmd, NULL) with a cal…

▾ TwilightOnePlus · OxygenOSvia CVEORG