CVE-2026-8706Medium· 6.5▾ SunlitFirefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the response rendered with the signed-in user's cookies. This vulnerability …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 2.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
0.2% → 0.2%
Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the response rendered with the signed-in user's cookies. This vulnerability was fixed in Firefox for iOS 151.0.
firefox < 151.0Upgrade past the affected range:
firefox 151.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-3031Medium· 6.5An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function
CVE-2025-11717Critical· 9.1When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used
CVE-2025-10535High· 7.5Information disclosure, mitigation bypass in the Privacy component in Firefox for Android
CVE-2026-118008High· 8.8Privilege escalation in the DOM: Navigation component
CVE-2026-117999NoneRace condition in the IPC component
CVE-2026-117976NoneSite isolation issue in the DOM: Navigation component