PT-2026-21733

CVE-2026-2800

Published

2026-02-24

Updated

2026-07-25

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 148 Thunderbird versions prior to 148

Description A spoofing issue exists in the WebAuthn component in Firefox for Android. This issue affects Firefox and Thunderbird.

Recommendations Update Firefox to version 148 or later. Update Thunderbird to version 148 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

OPENSUSE-SU-2026:10257-1

OPENSUSE-SU-2026:11373-1

Found an issue in the description? Have something to add? Feel free to write us 👾