Skip to content
OpenAdvisories

Product · Google Cloud

Identity Platform and Firebase Authentication

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2026-85268

    Cross-Site Scripting (XSS) in Firebase Auth Handler via Malicious Bundle ID

    A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase Authentication versions prior to 2026-08-14 on iOS allows an unauthenticated remote attacker to execute arbitrary JavaScript using a malicio…

    Google Cloud Identity Platform and Firebase Authentication