CVE-2026-85268

A Cross-Site Scripting (XSS) vulnerability (CWE-79) exists in the auth/handler component of Google Cloud Identity Platform and Firebase Authentication for iOS. Affected versions are those prior to 2026-08-14 . An unauthenticated remote attacker can exploit this by using a malicious iOS bundle ID ...