Mmastodon TechnologyCybersecurity first seen 20 h ago, last 20 h ago, peak #11

Google Cloud XSS vulnerability disclosed in Firebase Authentication

Original: 🚨 EUVD-2026-113761 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: Identity Platform and Firebase Authentication 🏢 Vendor: Google

A high-severity cross-site scripting vulnerability, tracked as EUVD-2026-113761, has been disclosed in the auth/handler component of Google Cloud Identity Platform and Firebase Authentication. The flaw carries a CVSS v3.1 score of 8.7 and was updated on 30 October 2026. Security teams using Firebase login flows are advised to review the advisory and patch affected implementations.

Why now: High-severity vulnerabilities in widely used authentication services draw immediate attention from security teams assessing patching priorities.

Google CloudFirebase AuthenticationIdentity Platform

Open on mastodon →

Evidence

• 🚨 EUVD-2026-113761 📊 Score: 8.7/10 (CVSS v3.1) 📦 Product: Identity Platform and Firebase Authentication 🏢 Vendor: Google Cloud 📅 Updated: 2026-10-30 📝 A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4235212