CVE-2026-96869

Analyzed Analyzed - Analysis Complete

Information Disclosure in Firefox Networking Component

Publication date: 2026-09-29

Last updated on: 2026-10-05

Assigner: Mozilla Corporation

Description

Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-10-05

Generated

2026-10-19

AI Q&A

2026-09-29

EPSS Evaluated

2026-10-18

NVD

CVE-2026-96869

EUVD

EUVD-2026-88947

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	firefox	From 154.0.0 (inc) to 157.0.0 (exc)
mozilla	thunderbird	From 154.0 (inc) to 157.0 (exc)
mozilla	firefox	From 141.0 (inc) to 153.4.0 (exc)
mozilla	thunderbird	to 140.17.0 (exc)
mozilla	thunderbird	From 141.0 (inc) to 153.4.0 (exc)
mozilla	firefox	to 140.17.0 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability involves an information disclosure issue in the Networking component of Firefox browsers. It allows unauthorized access to sensitive data transmitted over the network.

Detection Guidance

This vulnerability is specific to Firefox browsers and was fixed in versions Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17. Detection involves checking installed Firefox versions on systems and networks. Compare installed versions against the patched versions listed.

Impact Analysis

An attacker could exploit this to steal sensitive information such as login credentials, personal data, or browsing activity. This may lead to identity theft, financial loss, or privacy breaches.

Compliance Impact

This vulnerability could result in non-compliance with GDPR, HIPAA, or other privacy regulations due to unauthorized data exposure. Organizations may face legal penalties, fines, or reputational damage.

Mitigation Strategies

Update Firefox ESR to version 153.4 or later, Firefox to version 157 or later, or Firefox ESR to version 140.17 or later to address the information disclosure vulnerability in the Networking component.

Hi! I’m here to help you understand CVE-2026-96869. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70