PT-2026-125094

CVE-2026-116632

·

Published

2026-10-26

·

Updated

2026-10-26

Description by

CVSS 3.1
5.4
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-451: User Interface (UI) Misrepresentation of Critical Information
Related identifiers
CVE-2026-116632
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com