Question 1

What is CVE-2026-85268 — CVE-2026-85268?

Accepted Answer

A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID.

Question 2

What is the authoritative source for CVE-2026-85268?

Accepted Answer

CVE-2026-85268 (CVE-2026-85268) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-85268CVE-2026-85268

Description

Scoring