PT-2026-125093

CVE-2026-116631

·

Published

2026-10-26

·

Updated

2026-10-26

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-451: User Interface (UI) Misrepresentation of Critical Information
Related identifiers
CVE-2026-116631
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com