PT-2026-48265 · Klar+1 · Klar+1

Renwa Hiwa · CVE-2026-11799 · Published 2026-06-09 · Updated 2026-06-11

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Focus for iOS versions prior to 151.3.1 Klar for iOS versions prior to 151.3.1

Description Universal Cross-Site Scripting (UXSS) exists in the Webkit navigation of Focus for iOS and Klar for iOS. UXSS is a security flaw that allows an attacker to execute malicious scripts across different origins, bypassing the Same-Origin Policy (SOP), which is a critical security mechanism that prevents websites from interacting with data from other websites.

Recommendations Update Focus for iOS to version 151.3.1. Update Klar for iOS to version 151.3.1.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-11799

Affected Products

Focus

Klar

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-11799 · Security Note
• https://mozilla.org/security/advisories/mfsa2026-55 · Vendor Advisory
• https://twitter.com/RenwaX23/status/2065016036433301822 · Twitter Post
• https://bugzilla.mozilla.org/show_bug.cgi?id=1975667 · Note