SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-16405

HIGH · CVSS 7.5 EPSS 0.26%

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

A vulnerability in the WebSockets component of Firefox and Thunderbird allows for information disclosure, potentially exposing sensitive data to unauthorized parties. Users of affected versions should prioritize updating to Firefox 153, Firefox ESR 140.13, Thunderbird 153, or Thunderbird 140.13 to mitigate this high-severity risk. Organizations relying on these applications for secure communications should take immediate action to protect their data integrity.

CVE
CVE-2026-16405
Severity
HIGH
CVSS
7.5
EPSS
0.26%
Firefox

Original NVD Description

Information disclosure in the Networking: WebSockets component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Related CVEs

Other vulnerabilities affecting the same vendor(s)