Docile-Alligator CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Docile-Alligator CVE published 2026-10-25

CVE-2026-116072

The Infinity for Reddit app through version 8.3.4 contains a login cross-site request forgery vulnerability. This vulnerability allows attackers to log victims into an attacker-controlled account due to a hardcoded OAuth state value in the LoginChromeCustomTabActivity redirect handler. To exploit this, an attacker would authorize the app's client ID with their own Reddit account, then deliver a specially [truncated]