CVE-2026-8960

HighCVSS 7.5

Published: 19/05/2026(UTC)Updated: 14/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Spoofing issue in WebExtensions, which was fixed in Firefox 151 and Thunderbird 151.

This vulnerability may allow attackers to spoof data in applications, potentially leading to unauthorized access or information manipulation.

It is recommended to update to the latest version of Firefox and Thunderbird to mitigate this vulnerability.

Original NVD description (English source)

Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS