CVE-2026-113470

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158.0.1 Firefox ESR versions prior to 153.5.1 Firefox ESR versions prior to 115.43.1 Thunderbird versions prior to 158.0.1

Description Compromised intermediate eMudhra certificates were blocked via OneCRL, a mechanism used to revoke certificates. This was distributed through RemoteSettings to ensure that clients block the compromised certificates even if RemoteSettings is disabled by policy or unavailable in the network environment.

Recommendations Update Firefox to version 158.0.1 or later. Update Firefox ESR to version 153.5.1 or later. Update Firefox ESR to version 115.43.1 or later. Update Thunderbird to version 158.0.1 or later.