Live › vulnerability › CVE-2026-118000
Go to dashboardA flaw in the HTTP networking component of Firefox can disclose information. The sources say it was fixed in Firefox 159 and Firefox ESR 153.6 but do not describe the exact data exposed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that ship or depend on Firefox builds older than 159 or ESR older than 153.6, including managed desktop fleets. The sources do not say which configurations or content are required to trigger the flaw, so the exact exposure is unknown.
No product ranges from the sources yet.
firefox --version.153.6 or later.159 or later.153.6 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Information disclosure in the Networking: HTTP component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-118000")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.