CVE-2026-18487

Name of the Vulnerable Software and Affected Versions Epiphany (affected versions not specified)

Description An issue in how the browser processes web addresses allows attackers to spoof the domain name displayed in the address bar. By using a specially crafted link containing a colon, such as https://trusted.com:80@attacker.com/, the address bar and security menus will show a trusted domain while the browser actually loads a malicious site. This behavior enables the creation of convincing phishing pages to deceive users into trusting a malicious website.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.