https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T14:59:25.381947+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2017-02592 bdu:2017-02592 2026-10-16T14:59:25.385713+00:00 bdu:2017-02592 https://cve.radiocsirt.org/vuln/cnvd-2017-04307 cnvd-2017-04307 2026-10-16T14:59:25.385746+00:00 cnvd-2017-04307 https://cve.radiocsirt.org/vuln/euvd-2026-73440 EUVD-2026-73440 2026-10-16T14:59:25.385760+00:00 EUVD-2026-73440 https://cve.radiocsirt.org/vuln/fkie_cve-2017-5626 fkie_cve-2017-5626 2026-10-16T14:59:25.385771+00:00

OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data.

 https://cve.radiocsirt.org/vuln/ghsa-4vmj-9vqv-5mj5 GHSA-4vmj-9vqv-5mj5 2026-10-16T14:59:25.385799+00:00

OxygenOS before version 4.0.2, on OnePlus 3 and 3T, has two hidden fastboot oem commands (4F500301 and 4F500302) that allow the attacker to lock/unlock the bootloader, disregarding the 'OEM Unlocking' checkbox, without user confirmation and without a factory reset. This allows for persistent code execution with high privileges (kernel/root) with complete access to user data.

 https://cve.radiocsirt.org/vuln/gsd-2017-5626 gsd-2017-5626 2026-10-16T14:59:25.385815+00:00 gsd-2017-5626