CVE-2026-85268 — Cross-Site Scripting in Firebase Auth Handler via Malicious Bundle ID

CIRCL Vulnerability-Lookup associates this vulnerability with CWE-79, improper neutralization of input during web page generation, which can result in cross-site scripting (XSS). According to the title, the issue affects the Firebase Auth Handler via a malicious Bundle ID.