PULSE
ES
FEED
ransomwhitearmor reclama a Verification · Technologyransomulose reclama a zzq-testransomulose reclama a probe-011637cabbf94076-ransomdragonforce reclama a Zhito Technology · UA · Technologyransomsilentransomgroup reclama a Morrison Cohen · US · Professional Servicesransomemperador reclama a Afflelou · FR · Retail & E-Commerceransombyod reclama a University of New Mexico · US · Educationransomrhysida reclama a MISC Group · MY · Energy & Utilitiesransomn0n reclama a Ingelectus Innovative Electrical Solutions S.L. · ES · Energy & Utilitiesransomwhitearmor reclama a Gamdom · Otherransomfalcon reclama a Beasley Allen Law Firm · US · Professional Servicesransomqilin reclama a RaceTrakka · AU · Retail & E-Commerceransomqilin reclama a Smith Feddeler & Smith · US · Professional Servicesransomqilin reclama a Delta Electric Power Association · US · Energy & Utilitiesransomwhitearmor reclama a Verification · Technologyransomulose reclama a zzq-testransomulose reclama a probe-011637cabbf94076-ransomdragonforce reclama a Zhito Technology · UA · Technologyransomsilentransomgroup reclama a Morrison Cohen · US · Professional Servicesransomemperador reclama a Afflelou · FR · Retail & E-Commerceransombyod reclama a University of New Mexico · US · Educationransomrhysida reclama a MISC Group · MY · Energy & Utilitiesransomn0n reclama a Ingelectus Innovative Electrical Solutions S.L. · ES · Energy & Utilitiesransomwhitearmor reclama a Gamdom · Otherransomfalcon reclama a Beasley Allen Law Firm · US · Professional Servicesransomqilin reclama a RaceTrakka · AU · Retail & E-Commerceransomqilin reclama a Smith Feddeler & Smith · US · Professional Servicesransomqilin reclama a Delta Electric Power Association · US · Energy & Utilities
← All CVEs
CVE WatchOct 26, 2026

CVE-2026-116631

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if t

CVSS

5.4

Medium

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Oct 26, 2026 · Last modified: Oct 26, 2026 · CWE-451

EPSS · 30d

Not enough EPSS history yet.

Technical description

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1166325.4 MED
—
———A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to display a phishing message inside system UI. This vulnerability was fixed in Firefox for iOS 156.1.14hCVE-2026-1094344.3 MED
22.8%
——7Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attackers can render a counterfeit address bar showing a trusted origin over attacker-controlled content after a single user tap, enabling credential harvesting, malware delivery, or social engineering through fake login, update, or payment pages.7dCVE-2026-1097477.3 HIG
20.5%
——6Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.8dCVE-2026-1097368.1 HIG
25.2%
——8Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.8dCVE-2026-1093468.1 HIG
20.1%
——6better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.16hCVE-2026-1063805.4 MED
11.2%
——3UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)20d