{"id":"CVE-2026-116081","kind":"vulnerability","aliases":["CVE-2026-116081"],"related":[],"title":"Sleipnir Mobile for iPhone and iPad: certificate checks let attackers eavesdrop","description":"Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. are vulnerable to improper certificate verification. A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.","summary":"Sleipnir Mobile, a browser app for iPhone and iPad from Fenrir Inc., does not properly verify server certificates. A man-in-the-middle attacker on the network path can read encrypted traffic.","severity":"medium","cvss":4.2,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Sleipnir Mobile","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["ipad","iphone","mobile-browser","other","sleipnir-mobile"],"not_affected_if":["desktop-browser-only","no-sleipnir-mobile-installed"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-11T06:17:14+00:00","first_seen_at":"2026-11-11T06:25:40+00:00","triaged_at":"2026-11-11T06:27:08+00:00","updated_at":"2026-11-11T06:27:08+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-11T06:27:08Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Sleipnir Mobile for iPhone and iPad: certificate checks let attackers eavesdrop","impact":"low","summary":"Sleipnir Mobile, a browser app for iPhone and iPad from Fenrir Inc., does not properly verify server certificates. A man-in-the-middle attacker on the network path can read encrypted traffic.","audience":"everyone","category":"other","nicknames":[],"who_cares":["iphone","ipad","sleipnir-mobile","mobile-browser"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"attacker reads encrypted browsing traffic on the network","analyst_note":"Check the NVD entry and Fenrir Inc.'s vendor advisory for affected versions and whether an App Store update fixes the certificate verification.","how_to_check":"unknown","plain_action":"If you use Sleipnir Mobile on your iPhone or iPad, avoid public or untrusted Wi-Fi until the vendor releases a fix; the sources do not name an update.","product_name":"Sleipnir Mobile","needs_analyst":true,"not_affected_if":["desktop-browser-only","no-sleipnir-mobile-installed"],"who_is_affected":"Anyone running Sleipnir Mobile or Sleipnir Mobile Black Edition on iPhone or iPad is potentially exposed when traffic crosses a network an attacker can intercept. The sources do not say which versions are affected or whether a fix exists, so the team should confirm with the vendor.","user_interaction":"unknown","product_ecosystem":"vendor","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000757,"input_tokens":4576,"output_tokens":599,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-116081':14A,17A '-2026':13A,16A 'allow':93C 'app':33B 'attack':10A,53B,91C,95C 'black':73C 'browser':24B,32B 'certif':7A,46B,83C 'check':8A 'communic':101C 'cve':12A,15A 'eavesdrop':11A,97C 'edit':74C 'encrypt':60B,100C 'fenrir':39B,77C 'improp':82C 'inc':40B,78C 'ipad':6A,20B,37B,66C,72C 'iphon':4A,21B,35B,65C,71C 'let':9A 'man':49B,87C 'man-in-the-middl':48B,86C 'may':92C 'middl':52B,90C 'mobil':2A,23B,28B,30B,63C,69C 'mobile':19A 'mobile-brows':22B 'network':56B 'path':57B 'proper':43B 'provid':75C 'read':59B 'server':45B 'sleipnir':1A,18A,27B,29B,62C,68C 'sleipnir-mobil':26B 'traffic':61B 'verif':84C 'verifi':44B 'vulner':80C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Sleipnir Mobile or Sleipnir Mobile Black Edition on iPhone or iPad is potentially exposed when traffic crosses a network an attacker can intercept. The sources do not say which versions are affected or whether a fix exists, so the team should confirm with the vendor.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"If you use Sleipnir Mobile on your iPhone or iPad, avoid public or untrusted Wi-Fi until the vendor releases a fix; the sources do not name an update.","pkeys":["mobile","sleipnirmobile"],"ptokens":["mobile","sleipnir"],"labels":["ipad","iphone","medium","mobilebrowser","other","sleipnirmobile","vendor"],"campaign_type":null,"search_a":"'-116081':14A,17A '-2026':13A,16A 'attack':10A 'certif':7A 'check':8A 'cve':12A,15A 'eavesdrop':11A 'ipad':6A 'iphon':4A 'let':9A 'mobil':2A 'mobile':19A 'sleipnir':1A,18A","search_b":"'app':33B 'attack':53B 'browser':24B,32B 'certif':46B 'encrypt':60B 'fenrir':39B 'inc':40B 'ipad':20B,37B 'iphon':21B,35B 'man':49B 'man-in-the-middl':48B 'middl':52B 'mobil':23B,28B,30B 'mobile-brows':22B 'network':56B 'path':57B 'proper':43B 'read':59B 'server':45B 'sleipnir':27B,29B 'sleipnir-mobil':26B 'traffic':61B 'verifi':44B","search_c":"'allow':93C 'attack':91C,95C 'black':73C 'certif':83C 'communic':101C 'eavesdrop':97C 'edit':74C 'encrypt':100C 'fenrir':77C 'improp':82C 'inc':78C 'ipad':66C,72C 'iphon':65C,71C 'man':87C 'man-in-the-middl':86C 'may':92C 'middl':90C 'mobil':63C,69C 'provid':75C 'sleipnir':62C,68C 'verif':84C 'vulner':80C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-11T06:17:14+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"vultures@jpcert.or.jp","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116081","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116081","severity":null,"published_at":"2026-11-11T06:17:14+00:00","modified_at":"2026-11-11T06:17:14+00:00","first_seen_at":"2026-11-11T06:25:40+00:00","fetched_at":"2026-11-11T06:25:40+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}