Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-31254

This issue was addressed with improved URL validation. This issue is fixed in Safari 26, iOS 26 and iPadOS 26. Processing maliciously crafted web content may lead to unexpected URL redirection.

Published

2025-09-15T23:15:29.703

Last Modified

2025-09-17T13:34:44.453

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-863
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apple safari < 26.0 Yes
Operating System apple ipados < 26.0 Yes
Operating System apple iphone_os < 26.0 Yes
References