Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-103417— Saved credentials can be autofilled after cross-origin navigation

Quick assessment

Affected
Mozilla Firefox for iOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Firefox for iOS 在保存的登录凭证的用户界面处于打开状态时，若发生跨源导航，可能会将保存的凭据自动填充到新页面。自动填充操作未绑定到原始页面，或在源地址变更时未被拒绝。此漏洞已在 Firefox for iOS 157.1 版本中得到修复。

AI Predicted 5.3 Difficulty: Easy
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-103417

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Saved credentials can be autofilled after cross-origin navigation
Source: CVE Program / CVE List V5
Vulnerability Description
Firefox for iOS could autofill saved credentials into a new page if cross-origin navigation occurred while the saved-login UI was open. Autofill was not bound to the originating page or rejected when its origin changed. This vulnerability was fixed in Firefox for iOS 157.1.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Mozilla Firefox for iOS 157.1 ~ * -

II. Public POCs for CVE-2026-103417

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-103417

请登录查看更多情报信息。

Other References for CVE-2026-103417 (2)

IV. Related Vulnerabilities

Same product: Firefox for iOS
Same vendor: Mozilla

V. Comments for CVE-2026-103417

No comments yet

Leave a comment