CVE-2026-57501— Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| zen-browser | desktop | < 1.21.5b | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-57501
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Zen: Context-menu "Open link in glance" / "Split link in new tab" loads a page-controlled link with the System principal, bypassing the web-content scheme restriction
Source: CVE Program / CVE List V5
Vulnerability Description
Zen is a firefox-based browser. Prior to 1.21.5b, Zen's glance and split-view context-menu actions, Open link in glance and Split link in new tab, load a page-controlled link URL with the System principal instead of the originating page's principal, allowing a malicious web page to place a link to a file URL that can load with System privileges when opened through either context-menu item and bypass the content-to-file security check that blocks an ordinary click. This issue is fixed in version 1.21.5b.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
特权授予不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Zen 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Zen Zen是Zen团队的一款集成服务器与网络功能的设备。 Zen 1.21.5b之前版本存在权限许可和访问控制问题漏洞，该漏洞源于glance和split-view上下文菜单操作中，使用System权限加载页面控制的链接URL，可能导致恶意网页通过链接绕过内容到文件的安全检查。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| zen-browser | desktop | < 1.21.5b | - |
II. Public POCs for CVE-2026-57501
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-57501
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-57501 (1)
Vendor Advisories for CVE-2026-57501 (1)
Vendor Pages for CVE-2026-57501 (1)
IV. Related Vulnerabilities
Same product: desktop
- CVE-2026-45150
Zen Browser - Missing Fullscreen Security Notification Allow - CVE-2026-44659
Zen Browser Mac - Address Bar Spoofing via Long Subdomain - CVE-2026-44658
Zen Browser: RSS Live-Folder Item URLs Are Not Scheme-Restri - CVE-2026-41431
Zen Browser MAR updater ships with signature verification re - CVE-2026-7701
Telegram Desktop Bot API url_auth_box.cpp RequestButton null
Same vendor: zen-browser
Same weakness: CWE-266
- CVE-2026-52791
fuse-overlayfs release-1.x preserves SUID/SGID bits after tr - CVE-2026-61951
WordPress TrueBooker plugin <= 1.2.3 - Privilege Escalation - CVE-2026-59540
WordPress SMS Alert Order Notifications plugin <= 3.9.6 - Pr - CVE-2026-59541
WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escala - CVE-2026-47237
Kubeflow Community Distribution: Overly Permissive Istio Per
V. Comments for CVE-2026-57501
No comments yet