CVE-2026-123139
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Improper verification of the source of a communication channel vulnerability in Opera Neon on macOS and Windows allows a malicious browser extension to take control of the browser by sending commands through MCP Hub to the built-in Browser Operator extension. This issue affects Opera Neon MCP Hub extension: 0.0.1.
| CWE | CWE-940 |
| Vendor | opera |
| Product | neon |
| Published | Nov 12, 2026 |
Stay Ahead of the Next One
Get instant alerts for opera neon
Be the first to know when new unknown vulnerabilities affecting opera neon are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Opera / Neon
1.0.0
References
Credits
maitai