TECNO vulnerabilities
We track 6 vulnerabilities in TECNO products across 5 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on January 6, 2026.
Latest TECNO vulnerabilities
- 9.8 Critical severity
com.afmobi.boomplayer: Insufficient Verification of Data Authenticity
Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows Authentication Bypass.This issue affects com.Afmobi.Boomplayer: 7.4.63.
- 9.8 Critical severity
4G Portable WiFi TR118: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in Tecno 4G Portable WiFi TR118 V008-20220830. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /goform/goform_get_cmd_process of the component SMS Check. The manipulation of the
- 9.8 Critical severity
com.afmobi.boomplayer: Incorrect Permission Assignment for Critical Resource
Improper permission configurationDomain configuration vulnerability of the mobile application (com.afmobi.boomplayer) can lead to account takeover risks.
- 7.5 High severity
com.transsion.videocallenhancer: Improper Privilege Management
The mobile application (com.transsion.videocallenhancer) interface has improper permission control, which can lead to the risk of private file leakage.
- 9.8 Critical severity
com.transsion.kolun.aiservice: Missing Authentication for Critical Functionality
The system application (com.transsion.kolun.aiservice) component does not perform an authentication check, which allows attackers to perform malicious exploitations and affect system services.
- 8.0 High severity
4G Portable WiFi TR118: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Tecno 4G Portable WiFi TR118 TR118-M30E-RR-D-EnFrArSwHaPo-OP-V008-20220830. It has been declared as critical. This vulnerability affects unknown code of the file /goform/goform_get_cmd_process of the component Ping Tool. The manipu