Mitigation Bypass in Networking HTTP Component of Firefox by Mozilla
CVE-2026-109760

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 13 October 2026

What is CVE-2026-109760?

A mitigation bypass vulnerability has been identified within the Networking: HTTP component of Firefox, potentially allowing unauthorized access or manipulation of network traffic. This flaw has been addressed in recent updates, specifically in Firefox version 158 and Firefox ESR 153.5, reinforcing the importance of regular updates to safeguard user data.

Affected Version(s)

Firefox 153.5

Firefox 158

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2070633

https://www.mozilla.org/security/advisories/mfsa2026-106/

https://www.mozilla.org/security/advisories/mfsa2026-108/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Oct 13, 2026

Credit

Myungyong Lee

CVE-2026-109760 Data

JSON