CVE-2026-85268 Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID

A Cross-Site Scripting XSS CWE-79 vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID...

CVE-2026-85268

A Cross-Site Scripting (XSS) vulnerability (CWE-79) exists in the auth/handler component of Google Cloud Identity Platform and Firebase Authentication for iOS. Affected versions are those prior to 2026-08-14 . An unauthenticated remote attacker can exploit this by using a malicious iOS bundle ID ...

CVE-2026-85268 Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID

A Cross-Site Scripting XSS CWE-79 vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID...