Spoofing Vulnerability in Firefox for Android by Mozilla
CVE-2026-100823

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 29 September 2026

What is CVE-2026-100823?

A spoofing vulnerability exists in the Downloads component of Firefox for Android, allowing attackers to manipulate file download behaviors. This could lead to unauthorized file access or redirection, posing risks to user data integrity. The issue was addressed in version 157 of the browser, improving overall application security.

Affected Version(s)

Firefox 157

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2054384

https://www.mozilla.org/security/advisories/mfsa2026-97/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 29, 2026
Vulnerability Reserved
Sep 26, 2026

Credit

Abdul Samad

CVE-2026-100823 Data

JSON