CVEvulnerability

CVE-2026-18487

5.4 MEDIUM Published 2026-08-06 Modified 2026-10-23 Official page ↗
Status
Awaiting Analysis
Published
2026-08-06
Last modified
2026-10-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Weaknesses
CWE-451

Description

A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon (for example, https://trusted.com:[email protected]/), the address bar and security menus will display the safe website (trusted.com) but it will actually load the attacker website (attacker.com) on the screen. This allows attackers to create convincing phishing pages to trick users into trusting a malicious site.

Related

Weakness · CWE (1)

  • CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness

References