Spoofing Vulnerability in Firefox Web Serial Component
CVE-2026-109770

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 13 October 2026

What is CVE-2026-109770?

A spoofing vulnerability in the Web Serial component of Firefox could allow an attacker to impersonate another entity during serial communication. This issue has been addressed in Firefox version 158 and Firefox ESR version 153.5. Users are encouraged to update their browsers to the latest versions to mitigate potential risks and enhance their security.

Affected Version(s)

Firefox 153.5

Firefox 158

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2059230

https://www.mozilla.org/security/advisories/mfsa2026-106/

https://www.mozilla.org/security/advisories/mfsa2026-108/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 13, 2026
Vulnerability Reserved
Oct 13, 2026

Credit

Mozilla

CVE-2026-109770 Data

JSON