CVE-2026-85268

ALTO 8.7CVE-2026-85268 · Published 30/10/2026 · updated 30/10/2026

En resumen

CVE-2026-85268 es una vulnerabilidad ALTO (CVSS 8.7).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.58%, mayor que el 48.0% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID.

References

firebase.google.com/support/releases

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free