CVE-2026-103922 | ionic-team Capacitor up to 6.2.1/7.6.8/8.5.0 WebView Navigation Guard cross-domain policy

October 1, 2026 Yanac

A vulnerability classified as problematic was found in ionic-team Capacitor up to 6.2.1/7.6.8/8.5.0. This impacts an unknown function of the component WebView Navigation Guard. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains.

This vulnerability is tracked as CVE-2026-103922. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More