Live › vulnerability › CVE-2026-116632
Go to dashboardA malicious web page could insert arbitrary text into the FaceTime call prompt that iOS shows, letting it display a phishing message inside system UI. The issue was fixed in Firefox for iOS 156.1.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 19:32 UTC. All times on this page are UTC.
Users of Firefox for iOS older than 156.1 who open untrusted web pages on iPhone or iPad. Teams that do not ship or use Firefox for iOS on managed devices have no exposure from this entry. The sources do not describe server-side impact.
No product ranges from the sources yet.
156.1 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.
This page as .md · .json · in your agent: get_signal("CVE-2026-116632")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.