CVE-2026-92068

Awaiting Analysis Awaiting Analysis - Queue

Firefox Reader Mode Site Isolation Bypass

Publication date: 2026-09-15

Last updated on: 2026-09-22

Assigner: Mozilla Corporation

Description

Site isolation issue in the Reader Mode component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, and Thunderbird 156.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-15

Last Modified

2026-09-22

Generated

2026-10-05

AI Q&A

2026-09-15

EPSS Evaluated

2026-10-04

NVD

CVE-2026-92068

EUVD

EUVD-2026-78453

Affected Vendors & Products

Vendor	Product	Version / Range
mozilla	firefox	156
mozilla	firefox_esr	153.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-346	The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

Executive Summary

This is a site isolation issue in Firefox's Reader Mode component. It allows potential data leakage between different websites when using Reader Mode, which is designed to display articles in a simplified format.

Detection Guidance

Detection requires checking Firefox version. Run 'firefox --version' or check 'about:support' in Firefox. Versions before 156 or Firefox ESR before 153.3 are vulnerable.

Impact Analysis

If exploited, this vulnerability could allow an attacker to access sensitive data from other websites while you are using Reader Mode. This might lead to unauthorized access to personal information or credentials.

Compliance Impact

The provided CVE data does not specify any direct impact on compliance with standards like GDPR or HIPAA. The vulnerability is a site isolation issue in Firefox's Reader Mode, which may lead to information disclosure but lacks details on regulatory implications.

Mitigation Strategies

Update Firefox to version 156 or later and Firefox ESR to 153.3 or later. Disable Reader Mode if updates are not immediately possible.

Hi! I’m here to help you understand CVE-2026-92068. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70