Information Disclosure in Firefox Networking Component by Mozilla
CVE-2026-92070

Currently unrated

Key Information:

Vendor: Mozilla
Status: Firefox
Vendor: CVE Published:; 15 September 2026

What is CVE-2026-92070?

This vulnerability resides in the Networking component of Firefox, enabling the possibility of unauthorized information disclosure. Affected versions include Firefox 156 and Firefox ESR 153.3, both of which have since been patched to address this security flaw. Users are advised to update to the latest versions to mitigate potential risks.

Affected Version(s)

Firefox 153.3

Firefox 156

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2060220

https://www.mozilla.org/security/advisories/mfsa2026-90/

https://www.mozilla.org/security/advisories/mfsa2026-93/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 15, 2026
Vulnerability Reserved
Sep 15, 2026

Credit

Mohamed Mbarek

CVE-2026-92070 Data

JSON