CVE WATCH / VULNERABILITY DETAIL
CVE-2026-116072
MEDIUMCVSS 5.4NVD feed
Published 25 October 2026 · tracked since 25 October 2026
Description
Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to log victims into an attacker-controlled account because the exported LoginChromeCustomTabActivity redirect handler checks a hardcoded OAuth state value. Attackers can authorize the ap
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-116070 MEDIUM 6.5
- CVE-2026-116049 HIGH 7.3
- CVE-2026-116050 HIGH 7.3
- CVE-2026-116048 HIGH 7.3
- CVE-2026-94295
- CVE-2026-114743
- CVE-2026-115183
- CVE-2026-115214
- CVE-2026-115251
- CVE-2026-116044 MEDIUM 6.3