PT-2025-9671

CVE-2025-27426

Published

2025-03-04

Updated

2025-11-19

CVSS 3.1

5.4

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Firefox for iOS versions prior to 136

Description The issue allows malicious websites to utilize a server-side redirect to an internal error page, resulting in a spoofed website URL.

Recommendations For Firefox for iOS versions prior to 136, update to version 136 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

ALT-PU-2025-11100

ALT-PU-2025-14599

Found an issue in the description? Have something to add? Feel free to write us 👾