Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2026-77682: Epiphany browser may auto‑fill forms without user input
CVE-2026-77682 · published 2 months ago
Summary
The Epiphany web browser on Debian and Ubuntu can be tricked into filling out online forms automatically. This could expose personal data if a malicious site manipulates the browser. Update the browser to the latest version or apply the vendor's security patches to stop the unwanted autofill behavior.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | epiphany-browser | All versions |
| Debian:12 | debian | epiphany-browser | All versions |
| Debian:13 | debian | epiphany-browser | All versions |
| Debian:14 | debian | epiphany-browser | All versions |
| Ubuntu:16.04:LTS | canonical | epiphany-browser | All versions |
Original advisory text
DEBIAN-CVE-2026-77682
[Use a user message to trigger form autofill]
References
- https://security-tracker.debian.org/tracker/CVE-2026-77682 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-77682 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-77682 Third Party Advisory
- https://gitlab.gnome.org/GNOME/epiphany/-/merge_requests/2147 Third Party Advisory
Timeline
Published27 Aug 2026
Updated17 Oct 2026
First seen22 Aug 2026
Track software like this
Free during beta