CVE-2026-11799PoC(mozilla / focus)

MEDIUMCVSS 7.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch mozilla focus systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.

mozilla CVEs Back to dashboard

4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.mozilla.org/security/advisories/mfsa2026-55/

Other references

https://bugzilla.mozilla.org/show_bug.cgi?id=1975667

Weakness type (CWE)

CWE-79

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

focus
klar

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
4 mentions across 2 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 3 signals
PoC mentioned or linked in 4 signals
Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Peaked 1d ago at 3 mentions (2026-06-11); latest day: 1
4 total mentions across 2 days

Affected systems

Vendors

mozilla

Products

focusklar

Deep dive

Activity timeline4 mentions / 2d

Signal classification2 categories

PoC

375.0%

Patch

125.0%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-11	3	Patch1PoC2
2026-08-20	1	PoC1

Full discourse4 posts

Renwa@RenwaX23136d
Patch
CVE-2026-11799: UXSS in Focus for iOS / Klar Webkit navigation Writeup: https://github.com/v12-security/pocs/tree/main/firefox Advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-55/#CVE-2026-11799 https://t.co/Jehqz0TOe8
Post summary
The post announces CVE‑2026‑11799, a UXSS flaw in iOS Klar WebKit, provides a PoC write‑up on GitHub and links to a Mozilla advisory that offers patch information.
11312048819.3K
9.4K followersView on X
I'M H4CK3R 42@luckyhacker4366d
PoC
CVE-2026-11799: UXSS in Focus for iOS / Klar Webkit navigation by Renwa Hiwa 🤯🔥 👨‍💻 Renwa Hiwa (x/RenwaX23) // V12 Security Team 🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-11799 🔗 https://github.com/v12-security/pocs/tree/main/firefox 🔗 https://www.mozilla.org/en-US/security/advisories/mfsa https://t.co/5oehSGfgFW
Post summary
The post announces CVE‑2026‑11799, a UXSS vulnerability in iOS Klar WebKit navigation, and provides a PoC via a GitHub repository, with no evidence of active exploitation or patch availability.
0101052.5K
5.0K followersView on X
Densel@luckyhacker43136d
PoC
CVE-2026-11799: UXSS in Focus for iOS / Klar Webkit navigation by Renwa Hiwa 🤯🔥 👨‍💻 Renwa Hiwa (x/RenwaX23) // V12 Security Team 🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-11799 🔗 https://github.com/v12-security/pocs/tree/main/firefox 🔗 https://www.mozilla.org/en-US/security/advisories/mfsa2026-55/ Join team 👉https://t.me/luckyhacker43 https://t.co/IyR9CaqZ2n
Post summary
The post highlights CVE‑2026‑11799 as a UXSS flaw in iOS/Klar WebKit and points to GitHub PoC code, but it does not report active exploitation, patches, or technical details.
00053638
2.8K followersView on X
N45HT@N45HTOfficial136d
PoC
CVE-2026-11799: UXSS in Focus for iOS / Klar Webkit navigation by Renwa Hiwa 🤯🔥 👨‍💻 Renwa Hiwa (x/RenwaX23) // V12 Security Team 🔗 https://nvd.nist.gov/vuln/detail/CVE-2026-11799 🔗 https://github.com/v12-security/pocs/tree/main/firefox 🔗 https://www.mozilla.org/en-US/security/advisories/mfsa2026-55/ https://t.co/yczsS7NRZd
Post summary
The post announces CVE‑2026‑11799, a UXSS flaw in iOS/WebKit, and shares PoC code on GitHub while referencing a vendor advisory that presumably contains a patch.
0000146
100 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	mozilla	focus	-	iphone_os	-
App	mozilla	klar	-	iphone_os	-

Explore more

Back to dashboard mozilla CVEs focus vulnerabilities

What researchers are saying

CVE-2026-11799

I'M H4CK3R 42[verified]@luckyhacker43PoC

The post announces CVE‑2026‑11799, a UXSS vulnerability in iOS Klar WebKit navigation, and provides a PoC via a GitHub repository, with no evidence of active exploitation or patch availability.

Renwa@RenwaX23Patch

The post announces CVE‑2026‑11799, a UXSS flaw in iOS Klar WebKit, provides a PoC write‑up on GitHub and links to a Mozilla advisory that offers patch information.

Densel@luckyhacker43PoC

The post highlights CVE‑2026‑11799 as a UXSS flaw in iOS/Klar WebKit and points to GitHub PoC code, but it does not report active exploitation, patches, or technical details.

N45HT@N45HTOfficialPoC

The post announces CVE‑2026‑11799, a UXSS flaw in iOS/WebKit, and shares PoC code on GitHub while referencing a vendor advisory that presumably contains a patch.