CVE-2026-113470

Awaiting Analysis Awaiting Analysis - Queue

Mozilla Firefox Blocked Compromised eMudhra Certificates via OneCRL

Publication date: 2026-10-20

Last updated on: 2026-10-21

Assigner: Mozilla Corporation

Description

Cryptographic issue in the Security Block-lists, Allow-lists, and other State component. This vulnerability was fixed in Firefox 158.0.1, Firefox ESR 153.5.1, Firefox ESR 115.43.1, Thunderbird 158.0.1, Thunderbird 153.5.1, and Firefox 158.0.2.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-21

Generated

2026-11-09

AI Q&A

2026-10-20

EPSS Evaluated

2026-11-08

NVD

CVE-2026-113470

EUVD

EUVD-2026-104991

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	firefox	158.0.1
mozilla	firefox_esr	153.5.1
mozilla	firefox_esr	115.43.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-295	The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

Executive Summary

CVE-2026-113470 is a high-impact cryptographic vulnerability in Firefox ESR versions 115.43.1 and related releases. It involves compromised intermediate eMudhra certificates that were blocked via Mozilla's OneCRL system on October 17, 2026. The certificates were distributed through RemoteSettings, and the fix updates the OneCRL block list to ensure clients block these certificates even if RemoteSettings is disabled or unavailable.

Detection Guidance

This vulnerability involves compromised intermediate eMudhra certificates blocked via Mozilla's OneCRL system. Detection primarily relies on verifying Firefox version and OneCRL updates. Check Firefox version with 'about:support' in the browser or run 'firefox --version' in terminal. Ensure your Firefox ESR version is 115.43.1 or later, or Firefox version is 158.0.1 or later.

Impact Analysis

This vulnerability could allow attackers to impersonate trusted websites or services using the compromised certificates. If exploited, it may lead to man-in-the-middle attacks, unauthorized data access, or other security breaches. Users of affected Firefox ESR versions should update to the patched versions immediately.

Compliance Impact

The vulnerability involves compromised intermediate eMudhra certificates which could undermine cryptographic trust. This may impact compliance with GDPR's data integrity and security requirements (Article 32) and HIPAA's encryption standards for protected health information, as unauthorized certificates could facilitate man-in-the-middle attacks or data interception.

Mitigation Strategies

Update Firefox to version 158.0.1 or later, or Firefox ESR to version 153.5.1 or 115.43.1 or later immediately. This ensures the OneCRL block list is updated to block compromised certificates. Disable RemoteSettings if not needed or ensure network policies do not interfere with OneCRL updates.

Hi! I’m here to help you understand CVE-2026-113470. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...