Is CVE-2026-116631 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116631?

CVE-2026-116631 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2026-116631

Description

A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.