{"id":"CVE-2026-85268","published":"2026-10-30T11:17:33.750","lastModified":"2026-10-30T19:37:07.073","description":"A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicious iOS bundle ID.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://firebase.google.com/support/releases#auth-helper-fix","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}