SLEIPNIR MOBILE · CVE-2026-116081 · Other
NO FIX YET
Sleipnir Mobile, a browser app for iPhone and iPad from Fenrir Inc., does not properly verify server certificates. A man-in-the-middle attacker on the network path can read encrypted traffic.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Anyone running Sleipnir Mobile or Sleipnir Mobile Black Edition on iPhone or iPad is potentially exposed when traffic crosses a network an attacker can intercept. The sources do not say which versions are affected or whether a fix exists, so the team should confirm with the vendor.
Not affected if desktop-browser-only, no-sleipnir-mobile-installed
Who cares ipad, iphone, mobile-browser, sleipnir-mobile
Unknown from the sources.
No fix yet, per the sources.
Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. are vulnerable to improper certificate verification. A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.