CVE-2026-116081: Low severity Fenrir Sleipnir Mobile for iPhone / iPad vulnerability
Sleipnir Mobile for iPhone / iPad and Sleipnir Mobile for iPhone / iPad Black Edition provided by Fenrir Inc. are vulnerable to improper certificate verification. A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of Sleipnir Mobile for iPhone/iPad and Sleipnir Mobile for iPhone/iPad Black Edition may be exposed when using encrypted communications that the applications fail to verify correctly.
What does an attacker need to exploit it?
An attacker needs to be positioned to perform a man-in-the-middle attack on the victim's network communications. The vector is network-based, and the supplied data indicates no privileges are required, but user interaction is required.
What could an attacker obtain or change?
A successful man-in-the-middle attack may allow eavesdropping on encrypted communications. The supplied severity vector also indicates limited confidentiality and integrity impact, with no availability impact.