Maxthon Technology Limited vulnerabilities and threats

CVE-2026-119730 is an address bar spoofing vulnerability in Maxthon Browser for Android versions before 7.5.8.103. It allows remote attackers to misrepresent a page's origin by exploiting the absence of a persistent fullscreen notification or trusted origin indicator when the Fullscreen API is used. This can trick users into believing they are on a trusted domain while interacting with attacker-controlled content, potentially leading to credential disclosure via phishing.