CVE-2026-8094

—

CVSS 3.1

9.8 critical

EPSS

<1%p38

Published

May 7, 2026 (May 7, 2026)

Modified

Jul 28, 2026

Description

Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2.

Vendors: mozilla
Products: firefox, thunderbird
Weakness: CWE-94
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.