CVE-2026-116631
MEDIUM
NVD
CVSS Score
5.4
Severity
MEDIUM
Published
Oct 26, 2026
Vendor
unknown
Description
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.