CVE-2026-11799

HighCVSS 7.5

Published: 09/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

UXSS vulnerability in Focus for iOS / Klar Webkit navigation. Fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.

An attacker can bypass Same-Origin Policy and execute script in another domain's context, enabling data theft or session hijacking.

Update Focus for iOS or Klar for iOS to version 151.3.1 or later.

Original NVD description (English source)

UXSS in Focus for iOS / Klar Webkit navigation. This vulnerability was fixed in Focus for iOS 151.3.1 and Klar for iOS 151.3.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS