CVE-2026-90860 | Canva up to 1.15.0 WebView access control

September 21, 2026 Yanac

A vulnerability was found in Canva up to 1.15.0 and classified as critical. This impacts an unknown function of the component WebView. Executing a manipulation can lead to improper access controls.

This vulnerability is handled as CVE-2026-90860. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More