CVE-2026-9078

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This vulnerability was fixed in Firefox for iOS 151.1.

• CWE-451

• https://bugzilla.mozilla.org/show_bug.cgi?id=2029371Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2026-52/Vendor Advisory

Published

May 25, 2026

Last Modified

Jul 23, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90774rustypaste before 0.18.1 validates the destination path befo…7.5
• CVE-2026-90775PostGIS address_standardizer through 3.7.0 fails to validate…6.5
• CVE-2026-90776Nodemailer versions 9.1.0 through 10.0.4 contain a quadratic…7.5
• CVE-2026-90777ESPnet before 202609 deserializes pretrained model checkpoin…8.8
• CVE-2026-90778SIPp through 3.7.7 contains a buffer overflow vulnerability …7.5
• CVE-2026-90779SIPp through 3.7.7 contains a stack buffer overflow vulnerab…7.5
• CVE-2026-90780SIPp through 3.7.7 contains a buffer overflow vulnerability …7.5
• CVE-2026-90781alsa-lib through 1.2.16.1 contains a stack buffer overflow i…4.4
• CVE-2026-90782S2OPC through 1.7.3 contains a null pointer dereference in m…5.3
• CVE-2026-90783MKVToolNix through 101.0 contains a heap buffer overflow in …7.8
• CVE-2026-90784A vulnerability has been found in Dvidelabs flatcc up to 0.6…5.3
• CVE-2026-90785A vulnerability was found in Dvidelabs flatcc up to 0.6.3. T…5.3