Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call prompt to appear as if that site had requested the call. This vulnerability was fixed in Firefox for iOS 156.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Mozilla disclosed CVE-2026-116631 (and the related CVE-2026-116632) for Firefox for iOS on October 26, 2026. The issues were fixed in Firefox for iOS 156.1, which was released on September 18, 2026. The latest version is now 159.0 - update your browser and keep auto updates enabled on all your devices.