CVE-2026-11326

creationtimestamp| type| source ---|---|--- 2026-06-05 04:48:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnjditl4jc2h...

CVE-2026-11326

OpenAI Atlas before 1.2025.288.15 exposed privileged browser APIs to web content on .openai.com origins. A cross-site scripting vulnerability in forum.openai.com could be used to access these functions, allowing access to browser history information and the ability to open or close tabs. OpenAI...