CVE-2026-81267

A vulnerability in Firefox allows a malicious webpage to stall a popup's cross-origin navigation, misleading users by displaying the destination origin in the address bar while rendering attacker-controlled content. This could lead to phishing attacks or other malicious activities, making it crucial for users of Firefox, particularly on iOS, to update to version 155.0 or later to mitigate this risk. Organizations that rely on Firefox for web access should prioritize this update to protect against potential exploitation.