CVE-2026-85268

A flaw was found in Google Cloud Identity Platform and Firebase Authentication. An unauthenticated remote attacker can exploit a Cross-Site Scripting XSS vulnerability in the authentication handler by supplying a malicious iOS bundle identifier. This issue allows the attacker to execute arbitrary...