PT-2026-41948
CVE-2026-8706
·
Published
2026-05-19
·
Updated
2026-07-23
Description by
CVSS 3.1
6.5
MediumMetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Firefox for iOS versions prior to 151.0
Description
Reader mode was hosted on an unauthenticated local web server. This allows another application on the same device to request arbitrary URLs and receive the response rendered with the signed-in user's cookies.
Recommendations
Update to version 151.0.
Found an issue in the description? Have something to add? Feel free to write us 👾