PT-2026-102596

CVE-2026-100822

·

Published

2026-09-29

·

Updated

2026-10-23

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 157 Firefox ESR versions prior to 153.4 Thunderbird versions prior to 157
Description A spoofing issue exists within the Networking: HTTP component.
Recommendations Update Firefox to version 157. Update Firefox ESR to version 153.4. Update Thunderbird to version 157.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
CLSA-2026-1792779937
OESA-2026-4451
OESA-2026-4452
OPENSUSE-SU-2026:11917-1
OPENSUSE-SU-2026:12097-1
OPENSUSE-SU-2026:12098-1
OPENSUSE-SU-2026:21980-1
SUSE-SU-2026:23981-1
SUSE-SU-2026:4543-1
SUSE-SU-2026:4545-1
SUSE-SU-2026:4627-1
Found an issue in the description? Have something to add? Feel free to write us 👾