CVE-2026-109434: Sleipnir Mobile for Android 0 to before 3.9.0

Affected technology

Sleipnir Mobile for Android · 0 to before 3.9.0
Fenrir

Description’s affected range: before 3.9.0

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Active user interaction

What an attacker can do

Remote attackers can impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Vendor/CNA’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality and availability impact as none; integrity impact as low.

Published 19-Oct-2026 19:47 UTC

CWE: CWE-451
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-19 19:46:42.191502+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-109434.html