https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T05:18:56.674344+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-53900 CVE-2026-53900 — Cookie injection was possible when opening a PDF link 2026-10-16T05:18:56.690390+00:00

Affected: Mozilla Firefox for iOS

Firefox for iOS preserved cookies set on the initial PDF request across cross-origin HTTP redirects in TemporaryDocument, allowing a malicious site to inject arbitrary cookies into requests to an unrelated target domain. This vulnerability was fixed in Firefox for iOS 152.0.